Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Project: OFBiz

Scan Information (show all):

Display: Showing Vulnerable Dependencies (click to show all)

Dependency CPE GAV Highest Severity CVE Count CPE Confidence Evidence Count
ofbiz-accounting-test.jar   0 5
ofbiz-accounting.jar   0 4
ofbiz-content-test.jar   0 1
ofbiz-content.jar   0 3
dom4j-1.6.1.jar dom4j:dom4j:1.6.1   0 18
poi-3.13-20150929.jar cpe:/a:apache:poi:3.13 org.apache.poi:poi:3.13   0 LOW 19
ofbiz-humanres.jar   0 4
ofbiz-manufacturing.jar   0 3
ofbiz-marketing.jar   0 3
ofbiz-order-test.jar   0 4
ofbiz-order.jar   0 4
ofbiz-party.jar   0 3
ofbiz-product-test.jar   0 4
ofbiz-product.jar   0 3
dozer-4.2.1.jar net.sf.dozer:dozer:4.2.1   0 12
watermarker-0.0.4.jar watermarker:watermarker:0.0.4   0 8
ofbiz-securityext-test.jar   0 1
ofbiz-securityext.jar   0 3
ofbiz-workeffort.jar   0 3
ofbiz-base-test.jar   0 5
ofbiz-base.jar   0 3
ant-1.9.0-ant-junit.jar org.apache.ant:ant-junit:1.9.0   0 20
ant-1.9.0-ant-launcher.jar org.apache.ant:ant-launcher:1.9.0   0 15
ant-1.9.0-ant.jar org.apache.ant:ant:1.9.0   0 18
ant-1.9.0-ant-apache-bsf.jar org.apache.ant:ant-apache-bsf:1.9.0   0 19
ant-contrib-1.0b3.jar ant-contrib:ant-contrib:1.0b3   0 15
avalon-framework-4.2.0.jar   0 11
barcode4j-2.1-barcode4j-fop-ext-complete.jar   0 10
batik-all-1.8.jar cpe:/a:apache:batik:1.8   0 LOW 8
bsh-engine-modified.jar   0 3
clhm-release-1.0-lru.jar   0 7
commons-beanutils-core-1.8.3.jar commons-beanutils:commons-beanutils-core:1.8.3   0 21
commons-codec-1.10.jar commons-codec:commons-codec:1.10   0 26
commons-collections4-4.1.jar cpe:/a:apache:commons_collections:4.1 org.apache.commons:commons-collections4:4.1   0 LOW 26
commons-compress-1.11.jar cpe:/a:apache:commons-compress:1.11 org.apache.commons:commons-compress:1.11   0 LOW 28
commons-csv-1.1.jar org.apache.commons:commons-csv:1.1   0 26
commons-el-1.0.jar commons-el:commons-el:1.0   0 22
commons-fileupload-1.3.1.jar cpe:/a:apache:commons_fileupload:1.3.1 commons-fileupload:commons-fileupload:1.3.1   0 LOW 25
commons-io-2.4.jar commons-io:commons-io:2.4   0 25
commons-lang-2.6.jar commons-lang:commons-lang:2.6   0 24
commons-logging-1.2.jar commons-logging:commons-logging:1.2   0 25
commons-net-3.3.jar commons-net:commons-net:3.3   0 25
commons-pool2-2.3.jar org.apache.commons:commons-pool2:2.3   0 25
commons-validator-1.4.1.jar commons-validator:commons-validator:1.4.1   0 26
esapi-2.1.0.jar org.owasp.esapi:esapi:2.1.0   0 14
fontbox-1.8.11.jar cpe:/a:font_project:font:1.8.11 org.apache.pdfbox:fontbox:1.8.11   0 LOW 23
fop-2.0.jar org.apache.xmlgraphics:fop:2.0   0 21
freemarker-2.3.22.jar org.freemarker:freemarker:2.3.22   0 26
guava-14.0.1.jar com.google.guava:guava:14.0.1   0 16
hamcrest-all-1.2.jar   0 3
httpclient-4.4.1.jar cpe:/a:apache:httpclient:4.4.1 org.apache.httpcomponents:httpclient:4.4.1   0 LOW 20
httpcore-4.4.1.jar org.apache.httpcomponents:httpcore:4.4.1   0 20
httpunit-1.7.jar httpunit:httpunit:1.7   0 17
ical4j-1.0-rc2.jar net.fortuna.ical4j:ical4j:1.0-rc2-SNAPSHOT   0 14
icu4j-57_1.jar com.ibm.icu:icu4j:57.1   0 23
ivy-2.2.0.jar org.apache.ivy:ivy:2.2.0   0 26
annotations-api-3.0.jar org.apache.tomcat:tomcat-annotations-api:7.0.54   0 15
el-api-3.0.jar org.apache.tomcat:tomcat-el-api:8.0.33   0 15
geronimo-activation_1.0.2_spec-1.0.jar org.apache.geronimo.specs:geronimo-activation_1.0.2_spec:1.0   0 13
geronimo-j2ee-connector_1.5_spec-2.0.0.jar org.apache.geronimo.specs:geronimo-j2ee-connector_1.5_spec:2.0.0   0 18
geronimo-jaxr_1.0_spec-1.0.jar org.apache.geronimo.specs:geronimo-jaxr_1.0_spec:1.0   0 13
geronimo-jaxrpc_1.1_spec-1.0.jar org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:1.0   0 13
geronimo-jms_1.1_spec-1.1.1.jar org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1   0 18
geronimo-jta_1.1_spec-1.1.1.jar org.apache.geronimo.specs:geronimo-jta_1.1_spec:1.1.1   0 18
geronimo-saaj_1.3_spec-1.1.jar org.apache.geronimo.specs:geronimo-saaj_1.3_spec:1.1   0 21
jsp-api-2.3.jar cpe:/a:apache:tomcat:8.0.33 org.apache.tomcat:tomcat-jsp-api:8.0.33   0 LOW 16
servlet-api-3.1.jar org.apache.tomcat:tomcat-servlet-api:8.0.33   0 15
jackson-annotations-2.4.0.jar com.fasterxml.jackson.core:jackson-annotations:2.4.0   0 25
jackson-core-2.4.2.jar com.fasterxml.jackson.core:jackson-core:2.4.2   0 25
jackson-databind-2.4.2.jar com.fasterxml.jackson.core:jackson-databind:2.4.2   0 25
javolution-5.4.3.jar javolution:javolution:5.4.3   0 14
jce-jdk13-154.jar   0 13
jdbm-1.0-SNAPSHOT.jar jdbm:jdbm:1.0-SNAPSHOT   0 8
jdom-1.1.jar   0 31
jempbox-1.8.11.jar org.apache.pdfbox:jempbox:1.8.11   0 23
jpim-0.1.jar   0 6
juel-impl-2.2.7.jar de.odysseus.juel:juel-impl:2.2.7   0 24
juel-spi-2.2.7.jar de.odysseus.juel:juel-spi:2.2.7   0 16
junit-dep-4.10.jar   0 3
log4j-1.2-api-2.3.jar org.apache.logging.log4j:log4j-1.2-api:2.3   0 25
log4j-api-2.3.jar org.apache.logging.log4j:log4j-api:2.3   0 26
log4j-core-2.3.jar cpe:/a:jcore:jcore:2.3 org.apache.logging.log4j:log4j-core:2.3   0 LOW 26
log4j-nosql-2.3.jar org.apache.logging.log4j:log4j-nosql:2.3   0 26
log4j-slf4j-impl-2.3.jar org.apache.logging.log4j:log4j-slf4j-impl:2.3   0 26
mail-1.5.1.jar com.sun.mail:javax.mail:1.5.1   0 26
nekohtml-1.9.16.jar net.sourceforge.nekohtml:nekohtml:1.9.16   0 16
owasp-java-html-sanitizer-r239.jar com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:r239   0 15
pdfbox-1.8.11.jar org.apache.pdfbox:pdfbox:1.8.11   0 23
resolver-2.9.1.jar xml-resolver:xml-resolver:1.2   0 19
antlr-2.7.6.jar antlr:antlr:2.7.6   0 10
asm-3.2.jar   0 7
bsf-2.4.0.jar   0 5
bsh-2.0b4.jar   0 7
groovy-all-2.4.5.jar cpe:/a:apache:groovy:2.4.5 org.codehaus.groovy:groovy-all:2.4.5   0 LOW 24
jakarta-oro-2.0.8.jar oro:oro:2.0.8   0 15
jython-nooro.jar   0 2
serializer-2.9.1.jar   0 12
shiro-core-1.2.3.jar cpe:/a:apache:shiro:1.2.3 org.apache.shiro:shiro-core:1.2.3   0 LOW 22
slf4j-api-1.6.4.jar org.slf4j:slf4j-api:1.6.4   0 16
tika-core-1.12.jar org.apache.tika:tika-core:1.12   0 21
tika-parsers-1.12.jar org.apache.tika:tika-parsers:1.12   0 20
ws-commons-java5-1.0.1.jar org.apache.ws.commons:ws-commons-java5:1.0.1   0 14
ws-commons-util-1.0.2.jar org.apache.ws.commons.util:ws-commons-util:1.0.2   0 15
xalan-2.7.2.jar cpe:/a:apache:xalan-java:2.7.2 xalan:xalan:2.7.2   0 LOW 40
xercesImpl-2.11.0.jar xerces:xercesImpl:2.11.0   0 59
xml-apis-1.4.01.jar xml-apis:xml-apis:1.4.01   0 54
xml-apis-ext-1.3.04.jar xml-apis:xml-apis-ext:1.3.04   0 27
xmlgraphics-commons-2.0.1.jar   0 8
xmlrpc-client-3.1.2.jar org.apache.xmlrpc:xmlrpc-client:3.1.2   0 17
xmlrpc-common-3.1.2.jar org.apache.xmlrpc:xmlrpc-common:3.1.2   0 17
xmlrpc-server-3.1.2.jar org.apache.xmlrpc:xmlrpc-server:3.1.2   0 17
xpp3-1.1.4c.jar xpp3:xpp3:1.1.4c   0 14
xstream-1.4.9.jar com.thoughtworks.xstream:xstream:1.4.9   0 33
zxing-core-3.2.0.jar com.google.zxing:core:3.2.0   0 14
ofbiz-catalina.jar   0 4
ecj-4.5.jar org.eclipse.jdt.core.compiler:ecj:4.5   0 18
tomcat-8.0.33-jasper.jar cpe:/a:apache:tomcat:8.0.33 org.apache.tomcat:tomcat-jasper:8.0.33   0 LOW 17
ofbiz-common-test.jar   0 5
ofbiz-common.jar   0 3
ofbiz-datafile.jar   0 3
ofbiz-entity-test.jar   0 4
ofbiz-entity.jar   0 3
commons-dbcp2-2.1.jar org.apache.commons:commons-dbcp2:2.1   0 25
derby-10.11.1.1.jar cpe:/a:apache:derby:10.11.1.1 org.apache.derby:derby:10.11.1.1   0 LOW 18
ofbiz-entityext.jar   0 3
ofbiz-geronimo.jar   0 3
geronimo-transaction-3.1.1.jar org.apache.geronimo.components:geronimo-transaction:3.1.1   0 19
validate/package.json   0 8
ofbiz-minilang-test.jar   0 5
ofbiz-minilang.jar   0 4
ofbiz-security.jar   0 3
ofbiz-service-test.jar   0 4
ofbiz-service.jar   0 3
ofbiz-service-rmi.jar   0 4
axiom-api-1.2.17.jar org.apache.ws.commons.axiom:axiom-api:1.2.17   0 24
axiom-impl-1.2.17.jar org.apache.ws.commons.axiom:axiom-impl:1.2.17   0 21
axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/core-aspects/pom.xml org.apache.ws.commons.axiom:core-aspects:1.2.17   0 6
axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/om-aspects/pom.xml org.apache.ws.commons.axiom:om-aspects:1.2.17   0 7
axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/shared-aspects/pom.xml org.apache.ws.commons.axiom:shared-aspects:1.2.17   0 7
axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/xml-utils/pom.xml org.apache.ws.commons.axiom:xml-utils:1.2.17   0 5
axis2-kernel-1.7.1.jar cpe:/a:apache:axis2:1.7.1 org.apache.axis2:axis2-kernel:1.7.1 Medium 2 LOW 15
neethi-3.0.3.jar cpe:/a:apache:apache_test:3.0.3 org.apache.neethi:neethi:3.0.3   0 LOW 25
woden-core-1.0M10.jar org.apache.woden:woden-core:1.0M10   0 22
wsdl4j-1.6.2.jar wsdl4j:wsdl4j:1.6.2   0 18
xmlschema-core-2.2.1.jar org.apache.ws.xmlschema:xmlschema-core:2.2.1   0 20
ofbiz-testtools.jar   0 3
spring-core-4.2.3.jar cpe:/a:pivotal:spring_framework:4.2.3
cpe:/a:springsource:spring_framework:4.2.3
cpe:/a:vmware:springsource_spring_framework:4.2.3
org.springframework:spring-core:4.2.3.RELEASE   0 LOW 19
spring-test-4.2.3.jar cpe:/a:pivotal:spring_framework:4.2.3
cpe:/a:vmware:springsource_spring_framework:4.2.3
org.springframework:spring-test:4.2.3.RELEASE   0 LOW 19
ofbiz-webapp-test.jar   0 1
ofbiz-webapp.jar   0 3
ezmorph-0.9.1.jar net.sf.ezmorph:ezmorph:0.9.1   0 13
iText-2.1.7.jar com.lowagie:itext:2.1.7   0 13
rome-0.9.jar rome:rome:0.9   0 21
ofbiz-webtools.jar   0 4
ofbiz-widget-test.jar   0 5
ofbiz-widget.jar   0 4
ofbiz.jar cpe:/a:apache:ofbiz:-   0 LOW 6
ofbiz-assetmaint.jar   0 4
ofbiz-bi.jar   0 5
ofbiz-birt.jar   0 3
axis-1.4.jar cpe:/a:apache:axis:1.4 axis:axis:1.4 Medium 2 HIGHEST 16
commons-discovery-0.5.jar commons-discovery:commons-discovery:0.5   0 24
flute.jar milyn:flute:1.3   0 13
jaxrpc.jar cpe:/a:apache:axis:1.4 axis:axis-jaxrpc:1.4 Medium 2 HIGHEST 12
js.jar   0 7
org.apache.xml.resolver_1.2.0.v201005080400.jar   0 9
org.apache.xml.serializer_2.7.1.v201005080400.jar   0 9
org.eclipse.birt.runtime_4.3.1.v20130918-1142.jar cpe:/a:eclipse:birt:4.3.1.v20130918 commons-codec:commons-codec:1.5   0 LOW 13
org.eclipse.core.contenttype_3.4.200.v20130326-1255.jar   0 11
org.eclipse.core.expressions_3.4.500.v20130515-1343.jar   0 11
org.eclipse.core.filesystem_1.4.0.v20130514-1240.jar   0 11
org.eclipse.core.jobs_3.5.300.v20130429-1813.jar   0 11
org.eclipse.core.resources_3.8.101.v20130717-0806.jar cpe:/a:eclipse:birt:3.8.101.v20130717 org.eclipse.birt.runtime:org.eclipse.core.resources:3.8.101.v20130717-0806   0 LOW 19
org.eclipse.core.resources_3.8.101.v20130717-0806.jar: resources-ant.jar   0 5
org.eclipse.core.runtime_3.9.0.v20130326-1255.jar   0 10
org.eclipse.datatools.connectivity.oda_3.4.1.v201308160907.jar cpe:/a:eclipse:birt:3.4.1.v20130816 org.eclipse.birt.runtime:org.eclipse.datatools.connectivity.oda:3.4.1.v201308160907   0 LOW 19
org.eclipse.emf.common_2.9.1.v20130827-0309.jar org.eclipse.birt.runtime:org.eclipse.emf.common:2.9.1.v20130827-0309   0 21
org.eclipse.emf.ecore.change_2.9.0.v20130827-0309.jar cpe:/a:eclipse:birt:2.9.0.v20130827 org.eclipse.birt.runtime:org.eclipse.emf.ecore.change:2.9.0.v20130827-0309   0 LOW 19
org.eclipse.emf.ecore.xmi_2.9.1.v20130827-0309.jar org.eclipse.birt.runtime:org.eclipse.emf.ecore.xmi:2.9.1.v20130827-0309   0 21
org.eclipse.emf.ecore_2.9.1.v20130827-0309.jar org.eclipse.birt.runtime:org.eclipse.emf.ecore:2.9.1.v20130827-0309   0 20
org.eclipse.emf_2.6.0.v20130902-0605.jar cpe:/a:eclipse:birt:2.6.0.v20130902 org.eclipse.birt.runtime:org.eclipse.emf:2.6.0.v20130902-0605   0 LOW 13
org.eclipse.equinox.app_1.3.100.v20130327-1442.jar   0 14
org.eclipse.equinox.common_3.6.200.v20130402-1505.jar org.eclipse.equinox:common:3.6.200-v20130402-1505   0 19
org.eclipse.equinox.preferences_3.5.100.v20130422-1538.jar   0 15
org.eclipse.equinox.registry_3.5.301.v20130717-1549.jar cpe:/a:eclipse:birt:3.5.301.v20130717 org.eclipse.birt.runtime:org.eclipse.equinox.registry:3.5.301.v20130717-1549   0 LOW 21
org.eclipse.osgi.services_3.3.100.v20130513-1956.jar cpe:/a:eclipse:birt:3.3.100.v20130513 org.eclipse.birt.runtime:org.eclipse.osgi.services:3.3.100.v20130513-1956   0 LOW 18
org.eclipse.osgi_3.9.1.v20130814-1242.jar cpe:/a:eclipse:birt:3.9.1.v20130814 org.eclipse.birt.runtime:org.eclipse.osgi:3.9.1.v20130814-1242   0 LOW 20
org.eclipse.update.configurator_3.3.200.v20130326-1319.jar   0 12
org.w3c.css.sac_1.3.0.v200805290154.jar org.eclipse.birt.runtime.3_7_1:org.w3c.css.sac:1.3.0   0 17
org.w3c.dom.smil_1.0.0.v200806040011.jar org.eclipse.birt.runtime.3_7_1:org.w3c.dom.smil:1.0.0   0 18
org.w3c.dom.svg_1.1.0.v201011041433.jar org.eclipse.birt.runtime.3_7_1:org.w3c.dom.svg:1.1.0   0 18
saaj.jar cpe:/a:apache:axis:1.4 axis:axis-saaj:1.4 Medium 2 HIGHEST 12
Tidy.jar cpe:/a:eclipse:birt:- org.eclipse.birt.runtime.3_7_1:Tidy:1 Medium 1 LOW 11
viewservlets.jar cpe:/a:eclipse:birt:- Medium 1 LOW 4
lucene-analyzers-3.0.0.jar org.apache.lucene:lucene-analyzers:3.0.0   0 20
lucene-core-3.0.0.jar org.apache.lucene:lucene-core:3.0.0   0 19
saxon65.jar cpe:/a:saxon:saxon:-   0 LOW 4
tagsoup-1.2.1.jar org.ccil.cowan.tagsoup:tagsoup:1.2.1   0 14
webhelpindexer.jar   0 5
ofbiz-ebay.jar   0 3
ofbiz-ebaystore.jar   0 3
attributes.jar   0 5
ebaycalls.jar   0 4
ebaysdkcore.jar   0 4
helper.jar   0 4
ofbiz-ecommerce.jar   0 3
ofbiz-example.jar   0 4
ofbiz-googlebase.jar   0 3
ofbiz-googlecheckout.jar   0 3
checkout-sdk-0.8.8.jar   0 4
ofbiz-hhfacility.jar   0 3
ofbiz-ldap.jar   0 3
cas-server-core-3.3.jar org.jasig.cas:cas-server-core:3.3   0 16
lucene-test.jar   0 5
lucene.jar   0 4
lucene-analyzers-common-5.3.1.jar org.apache.lucene:lucene-analyzers-common:5.3.1   0 21
lucene-core-5.3.1.jar org.apache.lucene:lucene-core:5.3.1   0 20
lucene-queryparser-5.3.1.jar org.apache.lucene:lucene-queryparser:5.3.1   0 22
ofbiz-oagis.jar   0 3
ofbiz-passport.jar   0 4
ofbiz-pos.jar   0 3
jcl.jar   0 3
jpos18-controls.jar   0 3
looks-2.0.2.jar   0 10
XuiCoreSwing-v3.2rc2b.jar   0 4
XuiOptional-v3.2rc2b.jar   0 5
ofbiz-projectmgr.jar   0 4
ofbiz-scrum.jar   0 3
ofbiz-solr.jar   0 3
solr-core-5.3.1.jar cpe:/a:apache:solr:5.3.1 org.apache.solr:solr-core:5.3.1   0 LOW 20
httpmime-4.4.1.jar cpe:/a:apache:httpclient:4.4.1 org.apache.httpcomponents:httpmime:4.4.1   0 LOW 20
joda-time-2.2.jar joda-time:joda-time:2.2   0 22
lucene-codecs-5.3.1.jar org.apache.lucene:lucene-codecs:5.3.1   0 21
lucene-highlighter-5.3.1.jar org.apache.lucene:lucene-highlighter:5.3.1   0 21
lucene-join-5.3.1.jar org.apache.lucene:lucene-join:5.3.1   0 22
lucene-misc-5.3.1.jar org.apache.lucene:lucene-misc:5.3.1   0 20
lucene-queries-5.3.1.jar org.apache.lucene:lucene-queries:5.3.1   0 22
lucene-spatial-5.3.1.jar org.apache.lucene:lucene-spatial:5.3.1   0 21
lucene-suggest-5.3.1.jar org.apache.lucene:lucene-suggest:5.3.1   0 22
noggit-0.6.jar org.noggit:noggit:0.6   0 11
org.restlet-2.3.0.jar cpe:/a:restlet:restlet:2.3.0   0 LOW 4
spatial4j-0.4.1.jar com.spatial4j:spatial4j:0.4.1   0 16
zookeeper-3.4.6.jar org.apache.zookeeper:zookeeper:3.4.6   0 19
antlr-runtime-3.5.jar org.antlr:antlr-runtime:3.5   0 16
asm-4.1.jar org.ow2.asm:asm:4.1   0 21
asm-commons-4.1.jar org.ow2.asm:asm-commons:4.1   0 22
commons-cli-1.2.jar commons-cli:commons-cli:1.2   0 24
commons-configuration-1.6.jar commons-configuration:commons-configuration:1.6   0 24
commons-exec-1.3.jar org.apache.commons:commons-exec:1.3   0 26
concurrentlinkedhashmap-lru-1.2.jar com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.2   0 12
hadoop-auth-2.6.0.jar cpe:/a:apache:hadoop:2.6.0 org.apache.hadoop:hadoop-auth:2.6.0 Low 1 HIGHEST 16
hppc-0.5.2.jar com.carrotsearch:hppc:0.5.2   0 14
htrace-core-3.0.4.jar org.htrace:htrace-core:3.0.4   0 12
jackson-core-2.5.4.jar com.fasterxml.jackson.core:jackson-core:2.5.4   0 26
jackson-dataformat-smile-2.5.4.jar com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.5.4   0 26
lucene-analyzers-kuromoji-5.3.1.jar org.apache.lucene:lucene-analyzers-kuromoji:5.3.1   0 22
lucene-analyzers-phonetic-5.3.1.jar org.apache.lucene:lucene-analyzers-phonetic:5.3.1   0 22
lucene-backward-codecs-5.3.1.jar org.apache.lucene:lucene-backward-codecs:5.3.1   0 21
lucene-expressions-5.3.1.jar org.apache.lucene:lucene-expressions:5.3.1   0 22
lucene-grouping-5.3.1.jar org.apache.lucene:lucene-grouping:5.3.1   0 22
lucene-memory-5.3.1.jar org.apache.lucene:lucene-memory:5.3.1   0 22
lucene-sandbox-5.3.1.jar org.apache.lucene:lucene-sandbox:5.3.1   0 20
protobuf-java-2.5.0.jar com.google.protobuf:protobuf-java:2.5.0   0 18
stax2-api-3.1.4.jar org.codehaus.woodstox:stax2-api:3.1.4   0 16
t-digest-3.1.jar com.tdunning:t-digest:3.1   0 13
woodstox-core-asl-4.4.1.jar org.codehaus.woodstox:woodstox-core-asl:4.4.1   0 22
wstx-asl-3.2.7.jar org.codehaus.woodstox:wstx-asl:3.2.7   0 19
ofbiz-webpos.jar   0 3
contrast-rO0.jar   0 7
notsoserial-1.0-SNAPSHOT.jar org.kantega:notsoserial:1.0-SNAPSHOT   0 9

Dependencies

ofbiz-accounting-test.jar

File Path: C:\projectsASF\ofbiz\applications\accounting\build\lib\ofbiz-accounting-test.jar
MD5: db2c4ce93c1ae67f5ef0626a61cadb5f
SHA1: 22d62288ecb3a9a47249f171a69efb87eca27129

Identifiers

  • None

ofbiz-accounting.jar

File Path: C:\projectsASF\ofbiz\applications\accounting\build\lib\ofbiz-accounting.jar
MD5: 305b8b2692bca31feaaccf78c5b8dda9
SHA1: b623dcc9905f9ef7ca9436fcd62bb266a2039675

Identifiers

  • None

ofbiz-content-test.jar

File Path: C:\projectsASF\ofbiz\applications\content\build\lib\ofbiz-content-test.jar
MD5: b7208cabdea83d3e43c49872cbb4b706
SHA1: 122d00d1f5526c6e466f9488d7682907ab561a04

Identifiers

  • None

ofbiz-content.jar

File Path: C:\projectsASF\ofbiz\applications\content\build\lib\ofbiz-content.jar
MD5: ca396f61ae75e7026010f64e94263851
SHA1: 7ad470242f8e375da8c86696592497821bbcee59

Identifiers

  • None

dom4j-1.6.1.jar

Description: dom4j: the flexible XML framework for Java

File Path: C:\projectsASF\ofbiz\applications\content\lib\dom4j-1.6.1.jar
MD5: 4d8f51d3fe3900efc6e395be48030d6d
SHA1: 5d3ccc056b6f056dbf0dddfdf43894b9065a8f94

Identifiers

poi-3.13-20150929.jar

Description: Apache POI - Java API To Access Microsoft Format Files

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\applications\content\lib\poi-3.13-20150929.jar
MD5: 1b43f32e2211546040597a9e2d07b869
SHA1: 0f59f504ba8c521e61e25f417ec652fd485010f3

Identifiers

  • cpe: cpe:/a:apache:poi:3.13   Confidence:LOW   
  • maven: org.apache.poi:poi:3.13   Confidence:HIGHEST

ofbiz-humanres.jar

File Path: C:\projectsASF\ofbiz\applications\humanres\build\lib\ofbiz-humanres.jar
MD5: d4d2d3322c0cae66f8b573d95d96dab7
SHA1: db60d950c76c3f2012d3654e015965d42d9c9df4

Identifiers

  • None

ofbiz-manufacturing.jar

File Path: C:\projectsASF\ofbiz\applications\manufacturing\build\lib\ofbiz-manufacturing.jar
MD5: f6afc5d33233d581283e00e3bb3dd41e
SHA1: 893cb99c170ab4f7a871a33d2875bb8f043855c4

Identifiers

  • None

ofbiz-marketing.jar

File Path: C:\projectsASF\ofbiz\applications\marketing\build\lib\ofbiz-marketing.jar
MD5: 4b43be2e51a3ff3b5503a61a5c3f2246
SHA1: a000a30a9178bc78e621e9d1825b457a3c8ecd65

Identifiers

  • None

ofbiz-order-test.jar

File Path: C:\projectsASF\ofbiz\applications\order\build\lib\ofbiz-order-test.jar
MD5: cac1b6cb1e52bebfd3c69c9e8f647bed
SHA1: d314a8cb4964b158fe275f2240b9994df7b554bd

Identifiers

  • None

ofbiz-order.jar

File Path: C:\projectsASF\ofbiz\applications\order\build\lib\ofbiz-order.jar
MD5: 1e3237469c4c15ee94ca7613dd80b5b9
SHA1: fea1c9848c1c44db01df925334460980330e1a16

Identifiers

  • None

ofbiz-party.jar

File Path: C:\projectsASF\ofbiz\applications\party\build\lib\ofbiz-party.jar
MD5: 27f1e19ccd507a1bc613e80ea6140982
SHA1: cecdc9b32c9df7c1468674eaf0214534bee91fc7

Identifiers

  • None

ofbiz-product-test.jar

File Path: C:\projectsASF\ofbiz\applications\product\build\lib\ofbiz-product-test.jar
MD5: 68dfc80065eefa2ca9f36b7ef5ae2b1f
SHA1: 16ba1518c51990bbf24ae653779acf22edc05bf5

Identifiers

  • None

ofbiz-product.jar

File Path: C:\projectsASF\ofbiz\applications\product\build\lib\ofbiz-product.jar
MD5: 13a3fe1d199220253c0444b0e7bbacd0
SHA1: 38c5c7ec4b85622cd0a74f360bc75fc9f2a5884b

Identifiers

  • None

dozer-4.2.1.jar

Description:  Dozer is a powerful, yet simple Java Bean to Java Bean mapper that recursively copies data from one object to another

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\applications\product\lib\dozer-4.2.1.jar
MD5: a27cb430802edcf056f4ebce3ce3a88d
SHA1: c00b07a2d3a4aec7a6add045262106ae553ac566

Identifiers

  • maven: net.sf.dozer:dozer:4.2.1   Confidence:HIGH

watermarker-0.0.4.jar

Description: A simple java library to allow image watermarking.

File Path: C:\projectsASF\ofbiz\applications\product\lib\watermarker-0.0.4.jar
MD5: 6d975194d3a526e4a2a3739b457b0004
SHA1: 821039419c7dfe4cd165cabdb686cb2b5f2ee535

Identifiers

  • maven: watermarker:watermarker:0.0.4   Confidence:HIGH

ofbiz-securityext-test.jar

File Path: C:\projectsASF\ofbiz\applications\securityext\build\lib\ofbiz-securityext-test.jar
MD5: f0c87bed09ab0801397163ddf54513e0
SHA1: adeea9d2bf9d29c8f2b75c03b3bb5fefcd85a196

Identifiers

  • None

ofbiz-securityext.jar

File Path: C:\projectsASF\ofbiz\applications\securityext\build\lib\ofbiz-securityext.jar
MD5: 72955248ca1b405e99b1ea903023712e
SHA1: a92050ae810bc05cee9c7330f87d626647ffeadc

Identifiers

  • None

ofbiz-workeffort.jar

File Path: C:\projectsASF\ofbiz\applications\workeffort\build\lib\ofbiz-workeffort.jar
MD5: 8a7d97ab0e8064b3217e5151352802dd
SHA1: feba58eb23f7494131e4a3afbb72a3d53d040126

Identifiers

  • None

ofbiz-base-test.jar

File Path: C:\projectsASF\ofbiz\framework\base\build\lib\ofbiz-base-test.jar
MD5: 00c4db38cf9967556cbf1c470af711f6
SHA1: 472f2e8b0ef746648043932cf94fbf07ec31bbff

Identifiers

  • None

ofbiz-base.jar

File Path: C:\projectsASF\ofbiz\framework\base\build\lib\ofbiz-base.jar
MD5: 683289f13af6e2b77de8c78c47adfd7b
SHA1: d87d4e9177f4283d9521db81bd68319c46aafc34

Identifiers

  • None

ant-1.9.0-ant-junit.jar

Description: contains the junit and junirreport tasks

File Path: C:\projectsASF\ofbiz\framework\base\lib\ant-1.9.0-ant-junit.jar
MD5: 99a7567e995ab2591d0cd7c3349f02e2
SHA1: cc83eb94ddcef9c12d5ede5feac3f31a3d320e82

Identifiers

ant-1.9.0-ant-launcher.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\ant-1.9.0-ant-launcher.jar
MD5: aa065e042ee374e7d97bcaf814cdcb8c
SHA1: a76484a4e3a893dd0ee018afef34f74df8e4ef6c

Identifiers

ant-1.9.0-ant.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\ant-1.9.0-ant.jar
MD5: f95c303d8ebed1503e22571f9214acab
SHA1: d667bc2c030a338720bfcf794d2189ea5c663b9e

Identifiers

ant-1.9.0-ant-apache-bsf.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\ant\ant-1.9.0-ant-apache-bsf.jar
MD5: 9c5a516f80f08874ecf08bbb90440e09
SHA1: 996470c20c515b964aff7939d2e3bf0d3f91edc4

Identifiers

ant-contrib-1.0b3.jar

Description: A collection of tasks (and at one point maybe types and other tools) for Apache Ant

License:

http://ant-contrib.sourceforge.net/tasks/LICENSE.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\ant\ant-contrib-1.0b3.jar
MD5: a6495d687a143cbaefa2ab812c69b42e
SHA1: 943cd5c8802b2a3a64a010efb86ec19bac142e40

Identifiers

avalon-framework-4.2.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\avalon-framework-4.2.0.jar
MD5: a874d1f49b448cbd0d9db84c2dfc54c4
SHA1: 73fdf5af02e1ce681f57ac107d6eeb2f045cbd67

Identifiers

  • None

barcode4j-2.1-barcode4j-fop-ext-complete.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\barcode4j-2.1-barcode4j-fop-ext-complete.jar
MD5: b6bebfaeef5985d068a4f9a1f8f52748
SHA1: a3b5ac2aeefd5b210b83d1a1032e110329aa8572

Identifiers

  • None

batik-all-1.8.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\batik-all-1.8.jar
MD5: ef1d830b1259f2a8e9bfd9fc411ddd0e
SHA1: 2e338c231b36d0212f4b3b7b2e8dcf80fa492bdf

Identifiers

  • cpe: cpe:/a:apache:batik:1.8   Confidence:LOW   

bsh-engine-modified.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\bsh-engine-modified.jar
MD5: 3869e80735faec2288b56ce6dc78bf16
SHA1: 9126a75065f5c4d50eb8333f213121e9c1a524b3

Identifiers

  • None

clhm-release-1.0-lru.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\clhm-release-1.0-lru.jar
MD5: 5272dc4023b354cdb545af2e38558c2b
SHA1: 8ce2689bdf402eec941bda5ef868173df9dde4de

Identifiers

  • None

commons-beanutils-core-1.8.3.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-beanutils-core-1.8.3.jar
MD5: 944f66e681239c8353e8497920f1e5d3
SHA1: 75812698e5e859f2cb587c622c4cdfcd61676426

Identifiers

commons-codec-1.10.jar

Description:  The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-codec-1.10.jar
MD5: 353cf6a2bdba09595ccfa073b78c7fcb
SHA1: 4b95f4897fa13f2cd904aee711aeafc0c5295cd8

Identifiers

commons-collections4-4.1.jar

Description: The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-collections4-4.1.jar
MD5: 45af6a8e5b51d5945de6c7411e290bd1
SHA1: a4cf4688fe1c7e3a63aa636cc96d013af537768e

Identifiers

commons-compress-1.11.jar

Description:  Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-compress-1.11.jar
MD5: 3709027e9eb963041cb2ebd275baa27b
SHA1: f43ce4c878078cbcfbb061353aa672a4c8e81443

Identifiers

commons-csv-1.1.jar

Description:  The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-csv-1.1.jar
MD5: fe44c93fe2fa4b04ec110ca22874fd03
SHA1: 1eeeb118cab7ec49c9a10b478356eff108d5e87e

Identifiers

commons-el-1.0.jar

Description: JSP 2.0 Expression Language Interpreter Implementation

License:

The Apache Software License, Version 2.0: /LICENSE.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-el-1.0.jar
MD5: 7c98594df7c126f33688fa6d93169639
SHA1: 1df2c042b3f2de0124750241ac6c886dbfa2cc2c

Identifiers

commons-fileupload-1.3.1.jar

Description:  The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-fileupload-1.3.1.jar
MD5: ed8eec445e21ec7e49b86bf3cbcffcbc
SHA1: c621b54583719ac0310404463d6d99db27e1052c

Identifiers

commons-io-2.4.jar

Description:  The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-io-2.4.jar
MD5: 7f97854dc04c119d461fed14f5d8bb96
SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad

Identifiers

commons-lang-2.6.jar

Description:  Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2

Identifiers

commons-logging-1.2.jar

Description: Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686

Identifiers

commons-net-3.3.jar

Description:  Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-net-3.3.jar
MD5: c077ca61598e9c21f43f8b6488fbbee9
SHA1: cd0d5510908225f76c5fe5a3f1df4fa44866f81e

Identifiers

commons-pool2-2.3.jar

Description: Apache Commons Object Pooling Library

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-pool2-2.3.jar
MD5: 9f406b4acc111aa8070db5a899149e70
SHA1: 62a559a025fd890c30364296ece14643ba9c8c5b

Identifiers

commons-validator-1.4.1.jar

Description:  Apache Commons Validator provides the building blocks for both client side validation and server side data validation. It may be used standalone or with a framework like Struts.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\commons\commons-validator-1.4.1.jar
MD5: 4b20b04c1f967af1a115fdefcbe70109
SHA1: 2231238e391057a53f92bde5bbc588622c1956c3

Identifiers

esapi-2.1.0.jar

Description: The Enterprise Security API (ESAPI) project is an OWASP project to create simple strong security controls for every web platform. Security controls are not simple to build. You can read about the hundreds of pitfalls for unwary developers on the OWASP web site. By providing developers with a set of strong controls, we aim to eliminate some of the complexity of creating secure web applications. This can result in significant cost savings across the SDLC.

License:

BSD: http://www.opensource.org/licenses/bsd-license.php
Creative Commons 3.0 BY-SA: http://creativecommons.org/licenses/by-sa/3.0/
File Path: C:\projectsASF\ofbiz\framework\base\lib\esapi-2.1.0.jar
MD5: 96af18ceaf39dffa1817c5ddb7204749
SHA1: 44c59665e7044a1cda8456af3fc8b6dd8713c509

Identifiers

  • maven: org.owasp.esapi:esapi:2.1.0   Confidence:HIGH

fontbox-1.8.11.jar

Description:  The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\fontbox-1.8.11.jar
MD5: 1d288da2caf97ce6d0a6508d9994c0b7
SHA1: 6ee13265d9ed8d4c1e102c3740af254c05d5fc88

Identifiers

fop-2.0.jar

Description: Apache FOP (Formatting Objects Processor) is the world's first print formatter driven by XSL formatting objects (XSL-FO) and the world's first output independent formatter. It is a Java application that reads a formatting object (FO) tree and renders the resulting pages to a specified output. Output formats currently supported include PDF, PCL, PS, AFP, TIFF, PNG, SVG, XML (area tree representation), Print, AWT and TXT. The primary output target is PDF.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\fop-2.0.jar
MD5: 975d749bda40924708a76534fc32f53f
SHA1: 04ff3fc3c96da7ba27044c649dd0e2ed4290edd4

Identifiers

freemarker-2.3.22.jar

Description:  FreeMarker is a "template engine"; a generic tool to generate text output based on templates.

License:

Apache License, Version 2.0: http://freemarker.org/LICENSE.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\freemarker-2.3.22.jar
MD5: 51cca65040c41326e9b6b2806aba23ff
SHA1: 473d784b3cd2dcb6d49a287ded0542b7862c7d68

Identifiers

guava-14.0.1.jar

Description:  Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\guava-14.0.1.jar
MD5: 58553f87d83b9f8ec74bd3529083ee2f
SHA1: 69e12f4c6aeac392555f1ea86fab82b5e5e31ad4

Identifiers

hamcrest-all-1.2.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\hamcrest-all-1.2.jar
MD5: 78e505c6f5ceaa0b5b1d9ee4171fd503
SHA1: dd6dbd1fbb67287f29279f1a91ea51791dd796eb

Identifiers

  • None

httpclient-4.4.1.jar

Description:  Apache HttpComponents Client

File Path: C:\projectsASF\ofbiz\framework\base\lib\httpclient-4.4.1.jar
MD5: 38f9399922142fc9538d690dbaae7e2e
SHA1: 016d0bc512222f1253ee6b64d389c84e22f697f0

Identifiers

httpcore-4.4.1.jar

Description:  Apache HttpComponents Core (blocking I/O)

File Path: C:\projectsASF\ofbiz\framework\base\lib\httpcore-4.4.1.jar
MD5: 27bf6d5323a86a6115b607ce82512d6c
SHA1: f5aa318bda4c6c8d688c9d00b90681dcd82ce636

Identifiers

httpunit-1.7.jar

Description: A Java library for the automatic stimulation and testing of web applications.

License:

MIT License: http://httpunit.sourceforge.net/doc/license.html
File Path: C:\projectsASF\ofbiz\framework\base\lib\httpunit-1.7.jar
MD5: 2411b28cd2ac747ea4ba131a1a0a3e31
SHA1: 2030058ecce7aea03442cd5b40782ab94e1008f5

Identifiers

ical4j-1.0-rc2.jar

Description:  A Java library for reading and writing iCalendar (*.ics) files

License:

iCal4j - License: LICENSE
File Path: C:\projectsASF\ofbiz\framework\base\lib\ical4j-1.0-rc2.jar
MD5: fdc50562e3cfd07c4409b06959c25b20
SHA1: 3b91c682c736bdd4695838ff6e26a13d3412c1fe

Identifiers

  • maven: net.fortuna.ical4j:ical4j:1.0-rc2-SNAPSHOT   Confidence:HIGH

icu4j-57_1.jar

Description:  International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support

License:

ICU License: http://source.icu-project.org/repos/icu/icu/trunk/LICENSE
File Path: C:\projectsASF\ofbiz\framework\base\lib\icu4j-57_1.jar
MD5: f9933ef5ad5b7396561cfa0988a9aac6
SHA1: 198ea005f41219f038f4291f0b0e9f3259730e92

Identifiers

ivy-2.2.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\ivy-2.2.0.jar
MD5: 2703395cb677b36bbe04f0e868a10d2b
SHA1: f9d1e83e82fc085093510f7d2e77d81d52bc2081

Identifiers

annotations-api-3.0.jar

Description: Annotations Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\annotations-api-3.0.jar
MD5: 667691e9a42fe072bba48485234cd6e7
SHA1: 87925e57a90c75bd60e2fe4c3fdbcef592c00e48

Identifiers

el-api-3.0.jar

Description: Expression language package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\el-api-3.0.jar
MD5: 9fb2ae5bdd0d86265e0e0866706741c1
SHA1: 794cf8e8d615c6ac136835867aef2fee125bc74b

Identifiers

geronimo-activation_1.0.2_spec-1.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-activation_1.0.2_spec-1.0.jar
MD5: a2ef03bac800790452eb400259ac10e1
SHA1: 6dc4b0c7d3358ae4752cf9cc0f97f98358ea7656

Identifiers

geronimo-j2ee-connector_1.5_spec-2.0.0.jar

Description: Provides open-source implementations of Sun specifications.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-j2ee-connector_1.5_spec-2.0.0.jar
MD5: feebbddea32964e994c2ccae59409fc3
SHA1: 1da837af8f5bf839ab48352f3dbfd6c4ecedc232

Identifiers

geronimo-jaxr_1.0_spec-1.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-jaxr_1.0_spec-1.0.jar
MD5: b75db39f775cfafb56eba304745d85ab
SHA1: f6a3b80feb6badbe12c21c8a51ede7fcd6e91e5f

Identifiers

geronimo-jaxrpc_1.1_spec-1.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-jaxrpc_1.1_spec-1.0.jar
MD5: 552a184c114db85a36a361c6e5349385
SHA1: c581838de2339f61f1965db0ff912ff2ac1c4b30

Identifiers

geronimo-jms_1.1_spec-1.1.1.jar

Description: Provides open-source implementations of Sun specifications.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-jms_1.1_spec-1.1.1.jar
MD5: d80ce71285696d36c1add1989b94f084
SHA1: c872b46c601d8dc03633288b81269f9e42762cea

Identifiers

geronimo-jta_1.1_spec-1.1.1.jar

Description: Provides open-source implementations of Sun specifications.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-jta_1.1_spec-1.1.1.jar
MD5: 4aa8d50456bcec0bf6f032ceb182ad64
SHA1: aabab3165b8ea936b9360abbf448459c0d04a5a4

Identifiers

geronimo-saaj_1.3_spec-1.1.jar

Description: SOAP AA for Java 1.3

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\geronimo-saaj_1.3_spec-1.1.jar
MD5: 3ad94b4a728eadf47458ac4a9ae8fb23
SHA1: be6e6fc49ca84631f7c47a04d5438e193db54d7c

Identifiers

jsp-api-2.3.jar

Description: JSP package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\jsp-api-2.3.jar
MD5: c88199ccae1b0e7ae339bd0c20b3ccde
SHA1: 896e782956999c2632b3caa0caeb711720f28d7a

Identifiers

servlet-api-3.1.jar

Description: javax.servlet package

License:

        Apache License, Version 2.0 and
        Common Development And Distribution License (CDDL) Version 1.0
      :
        http://www.apache.org/licenses/LICENSE-2.0.txt and
        http://www.opensource.org/licenses/cddl1.txt
      
File Path: C:\projectsASF\ofbiz\framework\base\lib\j2eespecs\servlet-api-3.1.jar
MD5: 22f8c7ca3f1bc4c9340afb7daf506f69
SHA1: cc2becc4bf29a7bfd0d7a4055552683d421859c5

Identifiers

jackson-annotations-2.4.0.jar

Description: Core annotations used for value types, used by Jackson data binding package.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\jackson-annotations-2.4.0.jar
MD5: 6df1b79ec2e57d62106eb47129e4f7a3
SHA1: d6a66c7a5f01cf500377bd669507a08cfeba882a

Identifiers

jackson-core-2.4.2.jar

Description: Core Jackson abstractions, basic JSON streaming API implementation

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\jackson-core-2.4.2.jar
MD5: 1800d8b5c3324eaa7cff549bad28a98b
SHA1: ceb72830d95c512b4b300a38f29febc85bdf6e4b

Identifiers

jackson-databind-2.4.2.jar

Description: General data-binding functionality for Jackson: works on core streaming API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\jackson-databind-2.4.2.jar
MD5: afa5c05ef915babdc720cbe26cc91dca
SHA1: 8e31266a272ad25ac4c089734d93e8d811652c1f

Identifiers

javolution-5.4.3.jar

Description: Javolution - Java Solution for Real-Time and Embedded Systems. This project uses template classes to generates java code for various versions of the Java run-time (e.g. J2ME, 1.4, GCJ, 1.5). The default maven compilation builds executable for Java 1.5+ (parameterized classes). For others targets the ant script should be used directly (e.g. "ant j2me").

License:

BSD License: http://javolution.org/LICENSE.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\javolution-5.4.3.jar
MD5: ae26ac074aa89b05c2e73fe5bb96879f
SHA1: ea70532fa4aaa47de3a848bea3d4670ad421bbed

Identifiers

  • maven: javolution:javolution:5.4.3   Confidence:HIGH

jce-jdk13-154.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\jce-jdk13-154.jar
MD5: 41647ae4bcc4cef7d482d7c090e56fc8
SHA1: e8141481ce40d7dac959fd8e617a6ac00969bcb8

Identifiers

  • None

jdbm-1.0-SNAPSHOT.jar

License:

JDBM License, version 1.0
File Path: C:\projectsASF\ofbiz\framework\base\lib\jdbm-1.0-SNAPSHOT.jar
MD5: ae913d597d29de195bcaf6fb5889cd56
SHA1: 9b8d6b9bc1e04c0364decc10d494522e1b08fd00

Identifiers

  • maven: jdbm:jdbm:1.0-SNAPSHOT   Confidence:HIGH

jdom-1.1.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\jdom-1.1.jar
MD5: 143607f5af669492a0fcd66f9320bc18
SHA1: a97065a0b64844ded9a3325b06ad3dd2f6e40d1f

Identifiers

  • None

jempbox-1.8.11.jar

Description:  The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\jempbox-1.8.11.jar
MD5: ea59dc682cd3ed8ce8fb51e14e4693a4
SHA1: e4a930b874f4012314068550c70187e7857c4bd1

Identifiers

jpim-0.1.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\jpim-0.1.jar
MD5: 9ccce9e981b12b170b66c8842051d594
SHA1: 1578fb9d533748beba2402991e04522e6ed87fbe

Identifiers

  • None

juel-impl-2.2.7.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\juel-impl-2.2.7.jar
MD5: c5d7a62edafb5706b6beadbbcfd8f57d
SHA1: 97958467acef4c2b230b72354a4eefc66628dd99

Identifiers

juel-spi-2.2.7.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\juel-spi-2.2.7.jar
MD5: a4df3c8482a97ae937081b7d0ab407bb
SHA1: ca146332a93720784f24a5a24bb71c6d545133bd

Identifiers

junit-dep-4.10.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\junit-dep-4.10.jar
MD5: c77e5567de786e6b8bced4f85c6e9595
SHA1: dd147c1691bd9b07550ddcf1221137e02c4d1a37

Identifiers

  • None

log4j-1.2-api-2.3.jar

Description: The Apache Log4j 1.x Compatibility API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\log4j-1.2-api-2.3.jar
MD5: 97f562c4f299dc5f5f72e66ded465416
SHA1: 68cabf6c9f54a78b3393f59e6995bed5025f9acb

Identifiers

log4j-api-2.3.jar

Description: The Apache Log4j API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\log4j-api-2.3.jar
MD5: 94241ab3197b95a813d896820b3f6a87
SHA1: 8d85ef2675d1b45fe78adad021f809bdf12f2eeb

Identifiers

log4j-core-2.3.jar

Description: The Apache Log4j Implementation

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\log4j-core-2.3.jar
MD5: 110ab3e3e4f3780921e8ee5dde3373ad
SHA1: 58a3e964db5307e30650817c5daac1e8c8ede648

Identifiers

log4j-nosql-2.3.jar

Description: The Apache Log4j NoSQL appenders to databases such as MongoDB and CouchDB

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\log4j-nosql-2.3.jar
MD5: 2fee99cd070ddb33606347e0c0699b40
SHA1: dde88c324edf7ab0f9b120592b9d38f0046ae366

Identifiers

log4j-slf4j-impl-2.3.jar

Description: The Apache Log4j SLF4J API binding to Log4j 2 Core

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\log4j-slf4j-impl-2.3.jar
MD5: c5507f66db2c18b090b4ae2e8338244b
SHA1: 57868006655a34050ad39e78c5b12aa9c74927f7

Identifiers

mail-1.5.1.jar

Description: JavaMail API

License:

https://glassfish.java.net/public/CDDL+GPL_1_1.html
File Path: C:\projectsASF\ofbiz\framework\base\lib\mail-1.5.1.jar
MD5: 7568b973bb2e3cc6f150ad908ddf349f
SHA1: 9724dd44f1abbba99c9858aa05fc91d53f59e7a5

Identifiers

nekohtml-1.9.16.jar

Description: An HTML parser and tag balancer.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\nekohtml-1.9.16.jar
MD5: 30f85f202157f9967edf39bed7df5fbb
SHA1: 61e35204e5a8fdb864152f84e2e3b33ab56f50ab

Identifiers

owasp-java-html-sanitizer-r239.jar

Description:  A fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while protecting against XSS.

License:

New BSD License: http://www.opensource.org/licenses/bsd-license.php
File Path: C:\projectsASF\ofbiz\framework\base\lib\owasp-java-html-sanitizer-r239.jar
MD5: 8df417a8e9b0b363683113df889e89f2
SHA1: ea8dd89a9e8fcf90c1b666ac0585e7769224da5e

Identifiers

pdfbox-1.8.11.jar

Description:  The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\pdfbox-1.8.11.jar
MD5: 658e0ab46db3f460f7f942d48766c496
SHA1: 9c140423e447277af4b090cda665ab0099afa326

Identifiers

resolver-2.9.1.jar

Description: xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.

File Path: C:\projectsASF\ofbiz\framework\base\lib\resolver-2.9.1.jar
MD5: 706c533146c1f4ee46b66659ea14583a
SHA1: 3d0f97750b3a03e0971831566067754ba4bfd68c

Identifiers

antlr-2.7.6.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\antlr-2.7.6.jar
MD5: 97c6bb68108a3d68094eab0f67157962
SHA1: cf4f67dae5df4f9932ae7810f4548ef3e14dd35e

Identifiers

asm-3.2.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\asm-3.2.jar
MD5: 3bbbf05e5f03f6b2ca4cf3073bd2e1b8
SHA1: b441856c33ad0455324132ab32038bd59414bd05

Identifiers

  • None

bsf-2.4.0.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\bsf-2.4.0.jar
MD5: 162ed0b06486f75f07a7c8904bcea02a
SHA1: bcc312a71d062fbc7e2d5e2800356043acf39a03

Identifiers

  • None

bsh-2.0b4.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\bsh-2.0b4.jar
MD5: 51f9eadb789ac715e2e5399c7c71190a
SHA1: b6328ee47a52d749dbf5fb85a4b52327dae2a770

Identifiers

  • None

groovy-all-2.4.5.jar

Description: Groovy: A powerful, dynamic language for the JVM

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\groovy-all-2.4.5.jar
MD5: 7faaaed0ae664f4b6a654b209930e803
SHA1: 01730f61e9c9e59fd1b814371265334d7be0b8d2

Identifiers

jakarta-oro-2.0.8.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\jakarta-oro-2.0.8.jar
MD5: 42e940d5d2d822f4dc04c65053e630ab
SHA1: 5592374f834645c4ae250f4c9fbb314c9369d698

Identifiers

jython-nooro.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\scripting\jython-nooro.jar
MD5: 3c7d5b18c15ce75a8b7409f614302822
SHA1: 19890d914d22812aa3789cf98d3d506d74eda38d

Identifiers

  • None

serializer-2.9.1.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\serializer-2.9.1.jar
MD5: f0fa654c1ea1186e9a5bd56e48e0d4a3
SHA1: c8e1f1e7bf871280375b392776340e5822126e6a

Identifiers

  • None

shiro-core-1.2.3.jar

Description: Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\shiro-core-1.2.3.jar
MD5: 9147beb1ddba5ed220608bdd90759108
SHA1: 4ddf1b83360c7e39f02e3e20ca364d2c448ed01f

Identifiers

slf4j-api-1.6.4.jar

Description: The slf4j API

File Path: C:\projectsASF\ofbiz\framework\base\lib\slf4j-api-1.6.4.jar
MD5: a134d83e0c12a9611824284c855ffb13
SHA1: bff73780230e6559b63134bbc2056c312eabb849

Identifiers

  • maven: org.slf4j:slf4j-api:1.6.4   Confidence:HIGH

tika-core-1.12.jar

Description: This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\tika-core-1.12.jar
MD5: 7ee74ba982e66d3eefec2489ffab1a95
SHA1: e220bb1ad055e58093cbb5124a44675180af171e

Identifiers

  • maven: org.apache.tika:tika-core:1.12   Confidence:HIGH

tika-parsers-1.12.jar

Description: Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\tika-parsers-1.12.jar
MD5: 1e04a9af147f05d077fc570b951063f0
SHA1: 759a856a275e8d92169e342cf889c64ba7e1631b

Identifiers

  • maven: org.apache.tika:tika-parsers:1.12   Confidence:HIGH

ws-commons-java5-1.0.1.jar

Description: This is a small collection of classes, which are part of the Java 5 Core. In other words, you do not need this library, if you are running Java 5, or later. The Java 5 classes are used by projects like Apache JaxMe, Apache XML-RPC, or the the ws-common-utils.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\ws-commons-java5-1.0.1.jar
MD5: 0d9a7270cd94172b0748cba52bcd7164
SHA1: 3c4bebb31dc20daa0159c9ac52b73f765458933d

Identifiers

  • maven: org.apache.ws.commons:ws-commons-java5:1.0.1   Confidence:HIGH

ws-commons-util-1.0.2.jar

Description:  This is a small collection of utility classes, that allow high performance XML processing based on SAX. Basically, it is assumed, that you are using an JAXP 1.1 compliant XML parser and nothing else. In particular, no dependency on the javax.xml.transform package is introduced.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\ws-commons-util-1.0.2.jar
MD5: e0d2efe441e2dec803c7749c10725f61
SHA1: 3f478e6def772c19d1053f61198fa1f6a6119238

Identifiers

xalan-2.7.2.jar

Description:  Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements XSL Transformations (XSLT) Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from the command line, in an applet or a servlet, or as a module in other program.

File Path: C:\projectsASF\ofbiz\framework\base\lib\xalan-2.7.2.jar
MD5: 6aa6607802502c8016b676f25f8e4873
SHA1: d55d3f02a56ec4c25695fe67e1334ff8c2ecea23

Identifiers

  • cpe: cpe:/a:apache:xalan-java:2.7.2   Confidence:LOW   
  • maven: xalan:xalan:2.7.2   Confidence:HIGHEST

xercesImpl-2.11.0.jar

Description:  Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\base\lib\xercesImpl-2.11.0.jar
MD5: 43584adc1f895628055bad0aa98a1007
SHA1: 9bb329db1cfc4e22462c9d6b43a8432f5850e92c

Identifiers

xml-apis-1.4.01.jar

Description: xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The SAX License: http://www.saxproject.org/copying.html
The W3C License: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip
File Path: C:\projectsASF\ofbiz\framework\base\lib\xml-apis-1.4.01.jar
MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d
SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3

Identifiers

xml-apis-ext-1.3.04.jar

Description: xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.

File Path: C:\projectsASF\ofbiz\framework\base\lib\xml-apis-ext-1.3.04.jar
MD5: bcb07d3b8d2397db7a3013b6465d347b
SHA1: 41a8b86b358e87f3f13cf46069721719105aff66

Identifiers

xmlgraphics-commons-2.0.1.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\xmlgraphics-commons-2.0.1.jar
MD5: fcd771d4b8588acd9d96995223a80a30
SHA1: ce7d47367cc6754eb2fcc337b40c899956d33446

Identifiers

  • None

xmlrpc-client-3.1.2.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\xmlrpc-client-3.1.2.jar
MD5: b2da22fd59a0a6c8cf412f6f50d9880c
SHA1: ca8c57a1c4abc23b75b15ad636b4d20274f021c2

Identifiers

xmlrpc-common-3.1.2.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\xmlrpc-common-3.1.2.jar
MD5: 4037cace113e54ff20222a43cdc4b65d
SHA1: a8b0084839aee2f48113b3dc2517b8022a5fbc0f

Identifiers

xmlrpc-server-3.1.2.jar

File Path: C:\projectsASF\ofbiz\framework\base\lib\xmlrpc-server-3.1.2.jar
MD5: 04e884ead785a63e4ff8bc98f1f961f7
SHA1: 7e5123995d009129af3dfc663d2ec91c6541bf98

Identifiers

xpp3-1.1.4c.jar

Description: MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot in JDK 1.4+.

License:

Indiana University Extreme! Lab Software License, vesion 1.1.1: http://www.extreme.indiana.edu/viewcvs/~checkout~/XPP3/java/LICENSE.txt
Public Domain: http://creativecommons.org/licenses/publicdomain
Apache Software License, version 1.1: http://www.apache.org/licenses/LICENSE-1.1
File Path: C:\projectsASF\ofbiz\framework\base\lib\xpp3-1.1.4c.jar
MD5: 6e3c39f391e4994888b7d0030f775804
SHA1: 9b988ea84b9e4e9f1874e390ce099b8ac12cfff5

Identifiers

xstream-1.4.9.jar

Description: XStream is a serialization library from Java objects to XML and back.

License:

http://x-stream.github.io/license.html
File Path: C:\projectsASF\ofbiz\framework\base\lib\xstream-1.4.9.jar
MD5: 17f5ef61f6225a86ac39fc3dab45d755
SHA1: c43f6e6bfa79b56e04a8898a923c3cf7144dd460

Identifiers

zxing-core-3.2.0.jar

Description: Core barcode encoding/decoding library

File Path: C:\projectsASF\ofbiz\framework\base\lib\zxing-core-3.2.0.jar
MD5: d4100056fbaecca7cfa46507bc5c1e20
SHA1: e019d15a13a9786f881141d2df6654b8510bce8b

Identifiers

ofbiz-catalina.jar

File Path: C:\projectsASF\ofbiz\framework\catalina\build\lib\ofbiz-catalina.jar
MD5: 0ccf62ea28a32d1ab431c12712a91f34
SHA1: 6a55954352140119ca7f588c7f53f9eeed259583

Identifiers

  • None

ecj-4.5.jar

Description: Eclipse JDT Core Batch Compiler

License:

Eclipse Public License v1.0: http://www.eclipse.org/org/documents/epl-v10.php
File Path: C:\projectsASF\ofbiz\framework\catalina\lib\ecj-4.5.jar
MD5: c8578a34dcc2f354afd833f38efeb9f3
SHA1: 6ee0a678915ddac550d9187c896be6cb76f5cd2f

Identifiers

tomcat-8.0.33-jasper.jar

Description: Tomcats JSP Parser

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\catalina\lib\tomcat-8.0.33-jasper.jar
MD5: 77fb07272f972db78bd54712ed82e961
SHA1: 30525359ecc82c313a71e056adc917f952580f5e

Identifiers

ofbiz-common-test.jar

File Path: C:\projectsASF\ofbiz\framework\common\build\lib\ofbiz-common-test.jar
MD5: 0ff1608a6d1dbae35bea5fd7da5bd259
SHA1: 51cba2af6242ffe1baaeb46c955a5752e6662de0

Identifiers

  • None

ofbiz-common.jar

File Path: C:\projectsASF\ofbiz\framework\common\build\lib\ofbiz-common.jar
MD5: e33ed528f20ba1236c3b5fb87372e2c6
SHA1: 3111afb728202778ad4dc6aa54ebe889e14feb59

Identifiers

  • None

ofbiz-datafile.jar

File Path: C:\projectsASF\ofbiz\framework\datafile\build\lib\ofbiz-datafile.jar
MD5: 16f39e9d266610a9a1633157c7786d33
SHA1: d2d7c7fd64c938a19411b8f919c5bb4d20c5bd25

Identifiers

  • None

ofbiz-entity-test.jar

File Path: C:\projectsASF\ofbiz\framework\entity\build\lib\ofbiz-entity-test.jar
MD5: 8016da044b70374d4d745a0c70ee1297
SHA1: dce8f47f31e770c112e762a90342475928959352

Identifiers

  • None

ofbiz-entity.jar

File Path: C:\projectsASF\ofbiz\framework\entity\build\lib\ofbiz-entity.jar
MD5: 6808ad65770a150aa2d14718012ea468
SHA1: 340fc144c9ed082abf64c76ed2b3ec8c31e5fe65

Identifiers

  • None

commons-dbcp2-2.1.jar

Description: Apache Commons DBCP software implements Database Connection Pooling

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\entity\lib\commons-dbcp2-2.1.jar
MD5: b24defcf09144cbb5c82985d711c558f
SHA1: 95d4eab4b67874f452a69fe84e89f2952c6c27f6

Identifiers

derby-10.11.1.1.jar

Description: Contains the core Apache Derby database engine, which also includes the embedded JDBC driver.

File Path: C:\projectsASF\ofbiz\framework\entity\lib\jdbc\derby-10.11.1.1.jar
MD5: afe613d20dabc4eae9b025375adb7e84
SHA1: df4b50061e8e4c348ce243b921f53ee63ba9bbe1

Identifiers

ofbiz-entityext.jar

File Path: C:\projectsASF\ofbiz\framework\entityext\build\lib\ofbiz-entityext.jar
MD5: daa010fc9b6ac3dc1abff94a4165cf36
SHA1: 3765796269bd42e1df01a75c4ac8bc721439639d

Identifiers

  • None

ofbiz-geronimo.jar

File Path: C:\projectsASF\ofbiz\framework\geronimo\build\lib\ofbiz-geronimo.jar
MD5: fa642d6a94015f219aee58aaadc4a267
SHA1: 0e45db63ce8607e60096b5a1c3a60901e8a7dcc1

Identifiers

  • None

geronimo-transaction-3.1.1.jar

Description: Apache Geronimo Transaction Manager

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\geronimo\lib\geronimo-transaction-3.1.1.jar
MD5: e1caa0d3071d1a541b9de1987061d401
SHA1: 1cfdfcff3cd6a805be401946ab14213b0bad9cb4

Identifiers

validate/package.json

File Path: C:\projectsASF\ofbiz\framework\images\webapp\images\jquery\plugins\validate\package.json
MD5: 0d0dce7715fe4184364a6f0c10add6f1
SHA1: cfe99f497ed35573d7dfc291068d742399a0eee0

Identifiers

  • None

ofbiz-minilang-test.jar

File Path: C:\projectsASF\ofbiz\framework\minilang\build\lib\ofbiz-minilang-test.jar
MD5: 937091c0a961f304f4620b263fb6257b
SHA1: d5b0a5842d93d71378ce81b2ed26eae84cf54ce9

Identifiers

  • None

ofbiz-minilang.jar

File Path: C:\projectsASF\ofbiz\framework\minilang\build\lib\ofbiz-minilang.jar
MD5: 785e9893072a62215775e95d8be5058d
SHA1: 9507fb968b77660e79ad948a02e8079aad4e1913

Identifiers

  • None

ofbiz-security.jar

File Path: C:\projectsASF\ofbiz\framework\security\build\lib\ofbiz-security.jar
MD5: 158ad0f9173c9811a6d78c9105588f34
SHA1: 18c2679b371b78a6f6696becb2d2dffe9d2d12f5

Identifiers

  • None

ofbiz-service-test.jar

File Path: C:\projectsASF\ofbiz\framework\service\build\lib\ofbiz-service-test.jar
MD5: 6aaab496df74e15ac7c5be883387a889
SHA1: 631d5b0ddfc37b692ed5dd3ec72aa20927d0b36b

Identifiers

  • None

ofbiz-service.jar

File Path: C:\projectsASF\ofbiz\framework\service\build\lib\ofbiz-service.jar
MD5: 5017657c7beb2182f8e737cb66d36174
SHA1: 5592063498b191eebd06e389b09d47251832e484

Identifiers

  • None

ofbiz-service-rmi.jar

File Path: C:\projectsASF\ofbiz\framework\service\build\rmi\ofbiz-service-rmi.jar
MD5: 0332a1311bfe8d1047ae39692e0481b2
SHA1: b3d84539d5c0c80d81c4a50c17261b62cfac496f

Identifiers

  • None

axiom-api-1.2.17.jar

Description: The Axiom API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-api-1.2.17.jar
MD5: 08d711e7f682e7afca6a6eeeacf182a3
SHA1: aaf2a6028822dd3d55a4221188ecb73d4c9e219a

Identifiers

axiom-impl-1.2.17.jar

Description: The default implementation of the Axiom API.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-impl-1.2.17.jar
MD5: e2b43e00fe26ceb31432a903d99b4766
SHA1: 6df316d52cfd9efc4ee155b4dff0125769af1580

Identifiers

axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/core-aspects/pom.xml

File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/core-aspects/pom.xml
MD5: 578ca70e0a265fd5b1515eea14e67efb
SHA1: 42e8d4b4f2f941ab0b50240e6b096a1151221003

Identifiers

  • maven: org.apache.ws.commons.axiom:core-aspects:1.2.17   Confidence:HIGH

axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/om-aspects/pom.xml

Description: Contains aspects and implementation classes shared by LLOM and DOOM.

File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/om-aspects/pom.xml
MD5: be5411f23abad2369eb94ad64622bb54
SHA1: 2e08c15bd701460f07711311fad5785ecf7ad861

Identifiers

  • maven: org.apache.ws.commons.axiom:om-aspects:1.2.17   Confidence:HIGH

axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/shared-aspects/pom.xml

Description:  Contains mixins for methods that are shared between DOM and Axiom.

File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/shared-aspects/pom.xml
MD5: ea8a4489f8026ca7b879fae7de636afd
SHA1: bbe62a1404feb5cc8f9a7babbd7a12d50479144b

Identifiers

  • maven: org.apache.ws.commons.axiom:shared-aspects:1.2.17   Confidence:HIGH

axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/xml-utils/pom.xml

File Path: C:\projectsASF\ofbiz\framework\service\lib\axiom-impl-1.2.17.jar\META-INF/maven/org.apache.ws.commons.axiom/xml-utils/pom.xml
MD5: 76d0bf22e109300e6a67875c5781f659
SHA1: dac902cf3a5280076d8a92fc9a421fe15e23a1e6

Identifiers

  • maven: org.apache.ws.commons.axiom:xml-utils:1.2.17   Confidence:HIGH

axis2-kernel-1.7.1.jar

Description: Core Parts of Axis2. This includes Axis2 engine, Client API, Addressing support, etc.,

File Path: C:\projectsASF\ofbiz\framework\service\lib\axis2-kernel-1.7.1.jar
MD5: f3b93056eebaf4c7f71c84def4f486e9
SHA1: b60e8f9dfc753a9d3aff02dbaee58a560afffbc3

Identifiers

  • cpe: cpe:/a:apache:axis2:1.7.1   Confidence:LOW   
  • maven: org.apache.axis2:axis2-kernel:1.7.1   Confidence:HIGH

CVE-2012-5351  

Severity: Medium
CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)
CWE: CWE-287 Improper Authentication

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.

Vulnerable Software & Versions:

CVE-2012-4418  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)
CWE: CWE-287 Improper Authentication

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

Vulnerable Software & Versions:

neethi-3.0.3.jar

Description: Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\neethi-3.0.3.jar
MD5: 8a81813a03e2899ccd31f0e92f6cc691
SHA1: ee37a38bbf9f355ee88ba554a85c9220b75ba500

Identifiers

woden-core-1.0M10.jar

Description: The Woden project is a subproject of the Apache Web Services Project to develop a Java class library for reading, manipulating, creating and writing WSDL documents, initially to support WSDL 2.0 but with the longer term aim of supporting past, present and future versions of WSDL. There are two main deliverables: an API and an implementation. The Woden API consists of a set of Java interfaces. The WSDL 2.0-specific portion of the Woden API conforms to the W3C WSDL 2.0 specification. The implementation will be a high performance implementation directly usable in other Apache projects such as Axis2.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\woden-core-1.0M10.jar
MD5: 7b04937efc02bbc6cb0b73afb5d48b78
SHA1: ffed89bc39eb7fce6b74765b3417c6844d8003a2

Identifiers

wsdl4j-1.6.2.jar

Description: Java stub generator for WSDL

License:

CPL: http://www.opensource.org/licenses/cpl1.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\wsdl4j-1.6.2.jar
MD5: 2608a8ea3f07b0c08de8a7d3d0d3fc09
SHA1: dec1669fb6801b7328e01ad72fc9e10b69ea06c1

Identifiers

xmlschema-core-2.2.1.jar

Description: Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\service\lib\xmlschema-core-2.2.1.jar
MD5: bab3d98961f361b5e66dbcdadaad1ecf
SHA1: 02eff1f3776590d4c51cc735eab2143c497329f2

Identifiers

ofbiz-testtools.jar

File Path: C:\projectsASF\ofbiz\framework\testtools\build\lib\ofbiz-testtools.jar
MD5: 8cf7b2e88bb24c2ee33f62678cb7ee9d
SHA1: bb38187d113b80157e28be525c96bb45eb341d69

Identifiers

  • None

spring-core-4.2.3.jar

Description: Spring Core

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\testtools\lib\spring-core-4.2.3.jar
MD5: d32fdda47ac7d787d10d19c0f1129d6f
SHA1: 3ed00dad7a16b2a28df9348294f6a67151f43cf6

Identifiers

  • cpe: cpe:/a:pivotal:spring_framework:4.2.3   Confidence:LOW   
  • cpe: cpe:/a:springsource:spring_framework:4.2.3   Confidence:LOW   
  • cpe: cpe:/a:vmware:springsource_spring_framework:4.2.3   Confidence:LOW   
  • maven: org.springframework:spring-core:4.2.3.RELEASE   Confidence:HIGHEST

spring-test-4.2.3.jar

Description: Spring TestContext Framework

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\testtools\lib\spring-test-4.2.3.jar
MD5: 4ec65b45ae6c51ba549b04f1d75aac7c
SHA1: d7c055b8fb1117ef75045679892228a4816cd80e

Identifiers

  • cpe: cpe:/a:pivotal:spring_framework:4.2.3   Confidence:LOW   
  • cpe: cpe:/a:vmware:springsource_spring_framework:4.2.3   Confidence:LOW   
  • maven: org.springframework:spring-test:4.2.3.RELEASE   Confidence:HIGHEST

ofbiz-webapp-test.jar

File Path: C:\projectsASF\ofbiz\framework\webapp\build\lib\ofbiz-webapp-test.jar
MD5: 9265d008c8860ce2b16bc1f7b9311310
SHA1: 58d2e128d868cad1a70c0fffaf8b944a822a8a3a

Identifiers

  • None

ofbiz-webapp.jar

File Path: C:\projectsASF\ofbiz\framework\webapp\build\lib\ofbiz-webapp.jar
MD5: 5799d45b60916472c7743f695845d26c
SHA1: c5cfb0efc1c783541c121b7041a28051fc6f7138

Identifiers

  • None

ezmorph-0.9.1.jar

Description:  Simple java library for transforming an Object to another Object.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\webapp\lib\ezmorph-0.9.1.jar
MD5: 472aee9cd125701e4e6540df2ac1088e
SHA1: e88c9db9ae31156673858a47db5368553651b0f6

Identifiers

iText-2.1.7.jar

Description: iText, a free Java-PDF library

License:

Mozilla Public License: http://www.mozilla.org/MPL/MPL-1.1.html
File Path: C:\projectsASF\ofbiz\framework\webapp\lib\iText-2.1.7.jar
MD5: 7587a618197a065eac4a453d173d4ed6
SHA1: 892bfb3e97074a61123b3b2d7caa2db112750864

Identifiers

rome-0.9.jar

Description: All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it easy to work in Java with most syndication formats. Today it accepts all flavors of RSS (0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0) and Atom 0.3 feeds. Rome includes a set of parsers and generators for the various flavors of feeds, as well as converters to convert from one format to another. The parsers can give you back Java objects that are either specific for the format you want to work with, or a generic normalized SyndFeed object that lets you work on with the data without bothering about the underlying format.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\framework\webapp\lib\rome-0.9.jar
MD5: 19589699b01c59ccb4d5e61e4c78b311
SHA1: dee2705dd01e79a5a96a17225f5a1ae30470bb18

Identifiers

ofbiz-webtools.jar

File Path: C:\projectsASF\ofbiz\framework\webtools\build\lib\ofbiz-webtools.jar
MD5: e2e1632e8ab6eab98010bd415dfbc243
SHA1: dab7a70fa7d530888ea57c5ea1f0f1c5c3745296

Identifiers

  • None

ofbiz-widget-test.jar

File Path: C:\projectsASF\ofbiz\framework\widget\build\lib\ofbiz-widget-test.jar
MD5: 2e1c3eb745d7cd8d1e4d213fc477c34b
SHA1: e6169cd0f68926ad1a3e0a4232eef46dfd8ac9f6

Identifiers

  • None

ofbiz-widget.jar

File Path: C:\projectsASF\ofbiz\framework\widget\build\lib\ofbiz-widget.jar
MD5: 49d753f65dc6a19041b5417d1fe09751
SHA1: 716890e887fc7ed0b93e548b46dc20e165313c36

Identifiers

  • None

ofbiz.jar

File Path: C:\projectsASF\ofbiz\ofbiz.jar
MD5: 6d8954ceb505dc4c8a742a5d264b7cb6
SHA1: b1a784e1632587f235409c12d478bfb52b614b00

Identifiers

  • cpe: cpe:/a:apache:ofbiz:-   Confidence:LOW   

ofbiz-assetmaint.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\assetmaint\build\lib\ofbiz-assetmaint.jar
MD5: 7cafb8a985c7af81aa6c11150add3136
SHA1: 5994ece32a4f2603bfdb026091b02287375f1b9c

Identifiers

  • None

ofbiz-bi.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\bi\build\lib\ofbiz-bi.jar
MD5: 06eae335569cccc0a2ab126fceafcd57
SHA1: ec7f0c08c815fb8768eeafde472bff7990b32684

Identifiers

  • None

ofbiz-birt.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\build\lib\ofbiz-birt.jar
MD5: b022c87e6ab28f66127b8f2f46387dcb
SHA1: 800d6a152ce0ce5d0dc5ae95718f42a82d550c14

Identifiers

  • None

axis-1.4.jar

Description:  An implementation of the SOAP ("Simple Object Access Protocol") submission to W3C.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\axis-1.4.jar
MD5: 03dcfdd88502505cc5a805a128bfdd8d
SHA1: 94a9ce681a42d0352b3ad22659f67835e560d107

Identifiers

CVE-2014-3596  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

Vulnerable Software & Versions: (show all)

CVE-2012-5784  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)
CWE: CWE-20 Improper Input Validation

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Vulnerable Software & Versions: (show all)

commons-discovery-0.5.jar

Description: The Apache Commons Discovery component is about discovering, or finding, implementations for pluggable interfaces.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\commons-discovery-0.5.jar
MD5: b35120680c3a22cec7a037fce196cd97
SHA1: 3a8ac816bbe02d2f88523ef22cbf2c4abd71d6a8

Identifiers

flute.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\flute.jar
MD5: 2f2e13cd3523c545dd1c4617b373692c
SHA1: b7d59dc172005598b55699b1a75605b13c14f1fd

Identifiers

jaxrpc.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\jaxrpc.jar
MD5: b4592e5eccfeeeae87cfadef0ca66c66
SHA1: b393f1f0c0d95b68c86d0b1ab2e687bb71f3c075

Identifiers

CVE-2014-3596  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

Vulnerable Software & Versions: (show all)

CVE-2012-5784  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)
CWE: CWE-20 Improper Input Validation

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Vulnerable Software & Versions: (show all)

js.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\js.jar
MD5: 7cf98eb22ced3addc0aab7dcee06a4dc
SHA1: 5238d0e52ae97197f2b5ea9e94ebb2b864d61998

Identifiers

  • None

org.apache.xml.resolver_1.2.0.v201005080400.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.apache.xml.resolver_1.2.0.v201005080400.jar
MD5: 621d67a8ed1ef1e70dca898e1126ee24
SHA1: 8cb0def7637e396858ce04fa42313bf53b7b6cc0

Identifiers

  • None

org.apache.xml.serializer_2.7.1.v201005080400.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.apache.xml.serializer_2.7.1.v201005080400.jar
MD5: 95b3f276cfed8c356b9187d2f55b02e5
SHA1: 6e093377c624aaff339e1d238ceaadd689d6e3cc

Identifiers

  • None

org.eclipse.birt.runtime_4.3.1.v20130918-1142.jar

Description:  The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.birt.runtime_4.3.1.v20130918-1142.jar
MD5: ef13cf157ffa3e213319c7d59be164cd
SHA1: 1091f92e050045c0c807f0d708cbd8c7dd4a6153

Identifiers

  • maven: commons-codec:commons-codec:1.5   Confidence:HIGH
  • cpe: cpe:/a:eclipse:birt:4.3.1.v20130918   Confidence:LOW   

org.eclipse.core.contenttype_3.4.200.v20130326-1255.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.contenttype_3.4.200.v20130326-1255.jar
MD5: 53dc9380a18ddf9d5c020dbd4a29ae77
SHA1: a08e1073e27f8d80ac7ada3e1415d93875e598b5

Identifiers

  • None

org.eclipse.core.expressions_3.4.500.v20130515-1343.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.expressions_3.4.500.v20130515-1343.jar
MD5: b1bcbed13ad26260b1118cadfa4eea23
SHA1: b4723fbe6e32b5ddf42256814fc280d9390f356c

Identifiers

  • None

org.eclipse.core.filesystem_1.4.0.v20130514-1240.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.filesystem_1.4.0.v20130514-1240.jar
MD5: d5999101500966fbf810766745aaaa6f
SHA1: bc9dc0d14e6de65feb7906de9e274e2682c53b33

Identifiers

  • None

org.eclipse.core.jobs_3.5.300.v20130429-1813.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.jobs_3.5.300.v20130429-1813.jar
MD5: 89da18399b40095b0cb75fe41eb59fb1
SHA1: ef5f3f4141221dd6e9da061eca41e4a939628098

Identifiers

  • None

org.eclipse.core.resources_3.8.101.v20130717-0806.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.resources_3.8.101.v20130717-0806.jar
MD5: c0bee469b4b372e01633b788b3b622e0
SHA1: 5fc550dca872450b3929ff0d5903cc1b1950d03d

Identifiers

org.eclipse.core.resources_3.8.101.v20130717-0806.jar: resources-ant.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.resources_3.8.101.v20130717-0806.jar\ant_tasks\resources-ant.jar
MD5: 557b0f899da0fa041f3b023c2149f88d
SHA1: 28f94a7a7c20b25c522a68c061eee4f0aec44321

Identifiers

  • None

org.eclipse.core.runtime_3.9.0.v20130326-1255.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.core.runtime_3.9.0.v20130326-1255.jar
MD5: 9476e6aeeb085f23957439aaa905bfa9
SHA1: 106e19b16b912c27d5b55cfff66623fa2bf7c923

Identifiers

  • None

org.eclipse.datatools.connectivity.oda_3.4.1.v201308160907.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.datatools.connectivity.oda_3.4.1.v201308160907.jar
MD5: 1038c201a46b71ce01cee24b17a820e7
SHA1: 785f5e1b16ffe224500da7554870cb4aa607f37f

Identifiers

org.eclipse.emf.common_2.9.1.v20130827-0309.jar

Description: http://www.eclipse.org

License:

The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.emf.common_2.9.1.v20130827-0309.jar
MD5: aeda785fe85b0d763942918f52ebe459
SHA1: 2c268cc441822b35f3713af9b8f9de9446648bb5

Identifiers

org.eclipse.emf.ecore.change_2.9.0.v20130827-0309.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.emf.ecore.change_2.9.0.v20130827-0309.jar
MD5: f33935ee27c086c39afd383806649ee2
SHA1: d0de68f13da035e4e5172c764b204d6deebf0e2d

Identifiers

org.eclipse.emf.ecore.xmi_2.9.1.v20130827-0309.jar

Description: http://www.eclipse.org

License:

The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.emf.ecore.xmi_2.9.1.v20130827-0309.jar
MD5: 6b07e7e6cc434741e2f0acef30bbf53b
SHA1: 7efc48c6bab366f5851b424e596ad05842e41d4c

Identifiers

org.eclipse.emf.ecore_2.9.1.v20130827-0309.jar

Description: http://www.eclipse.org

License:

The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.emf.ecore_2.9.1.v20130827-0309.jar
MD5: f561e6b8c71d3b8f7b4babd1e136dc91
SHA1: 690fc86a8e039e92434a9d9f3872a20dd16fffcc

Identifiers

org.eclipse.emf_2.6.0.v20130902-0605.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.emf_2.6.0.v20130902-0605.jar
MD5: 2baffbebe13f5f1a32884b9f3f768a3c
SHA1: bf164e595e1a29ac17e1490cfe9f9ed4b6157c71

Identifiers

org.eclipse.equinox.app_1.3.100.v20130327-1442.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.equinox.app_1.3.100.v20130327-1442.jar
MD5: 15fb9829bcaf5e27e3326c338086b4ef
SHA1: 487677af4bf0fb19d5add5b33badcaa532825528

Identifiers

  • None

org.eclipse.equinox.common_3.6.200.v20130402-1505.jar

Description: Common Eclipse Runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar
MD5: f627423b8e912307fdc5260313af959f
SHA1: 5354112138f6e420a8152fc9526b15f25ed5f163

Identifiers

org.eclipse.equinox.preferences_3.5.100.v20130422-1538.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.equinox.preferences_3.5.100.v20130422-1538.jar
MD5: 48ce4d516094a03be9e1ee3b6e79cf81
SHA1: 205ced53d19fc2e97c4750d875761226ae91ae5c

Identifiers

  • None

org.eclipse.equinox.registry_3.5.301.v20130717-1549.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.equinox.registry_3.5.301.v20130717-1549.jar
MD5: 51640c697db7ffc4c82d20f2a929a788
SHA1: e6a70177c0acdcd6ac1545082ec5671816bcf8c9

Identifiers

org.eclipse.osgi.services_3.3.100.v20130513-1956.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.osgi.services_3.3.100.v20130513-1956.jar
MD5: 7f7d4198812b01cb7c5a26399af7706f
SHA1: 1d73531fac5372870373a06193985611b1239f0c

Identifiers

org.eclipse.osgi_3.9.1.v20130814-1242.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.osgi_3.9.1.v20130814-1242.jar
MD5: c9e8fe51244f8a2767834916ecff24b5
SHA1: cd3f11bd163003f0883aa53f029810afc41e9035

Identifiers

org.eclipse.update.configurator_3.3.200.v20130326-1319.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.eclipse.update.configurator_3.3.200.v20130326-1319.jar
MD5: c429b9e8f596e6704b35aee5fad48ec0
SHA1: 0f5bdbb0c2e81e244a456f39b64a22a2b8d7dfc7

Identifiers

  • None

org.w3c.css.sac_1.3.0.v200805290154.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.w3c.css.sac_1.3.0.v200805290154.jar
MD5: 5e7f05aba6c35250a6f0345a5f9c8ca0
SHA1: 8dfb0e08c19f3b47290096d27ab71ed4f2a5000a

Identifiers

org.w3c.dom.smil_1.0.0.v200806040011.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.w3c.dom.smil_1.0.0.v200806040011.jar
MD5: c2494764f38da65d09ce0a0444d00dcd
SHA1: 674bdda9162b48419741da833e445e190f33a58a

Identifiers

org.w3c.dom.svg_1.1.0.v201011041433.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\org.w3c.dom.svg_1.1.0.v201011041433.jar
MD5: dcf64eb5f94cf993600f30aac878d329
SHA1: 9c6413ed43b4e9ba56982a554e03bd012cc44ed9

Identifiers

saaj.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\saaj.jar
MD5: 87b30c8124683bbd11f9ff2bcaaafbf8
SHA1: 581149d1f391258754354f2acf2b56665d53de2e

Identifiers

CVE-2014-3596  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784.

Vulnerable Software & Versions: (show all)

CVE-2012-5784  

Severity: Medium
CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)
CWE: CWE-20 Improper Input Validation

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Vulnerable Software & Versions: (show all)

Tidy.jar

Description: A component of the BIRT runtime

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\Tidy.jar
MD5: 00418be9ec69f7f9a2dda911a1e77eaf
SHA1: 63b1e38f4ca630dbac3d2072cda2a9336914d10c

Identifiers

CVE-2009-4521  

Severity: Medium
CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.

Vulnerable Software & Versions:

viewservlets.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\birt\lib\viewservlets.jar
MD5: fc687e5b5fd43c0d734ccda6f2019628
SHA1: 2aa00f438b3137241d5800d625ec0a45e93a032f

Identifiers

  • cpe: cpe:/a:eclipse:birt:-   Confidence:LOW   

CVE-2009-4521  

Severity: Medium
CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.

Vulnerable Software & Versions:

lucene-analyzers-3.0.0.jar

Description: Additional Analyzers

File Path: C:\projectsASF\ofbiz\specialpurpose\cmssite\template\docbook\extensions\lucene-analyzers-3.0.0.jar
MD5: 5ec67da613aad8d0bb5f7b5ee8c56280
SHA1: 4fd1f6f06acac4274db213f42e688b7fdfe49704

Identifiers

lucene-core-3.0.0.jar

Description: Apache Lucene Java Core

File Path: C:\projectsASF\ofbiz\specialpurpose\cmssite\template\docbook\extensions\lucene-core-3.0.0.jar
MD5: e80e6dc76e8c1adb2e3611d9566d88f2
SHA1: 7c2d82c700746f84d60640507f26444f119e0423

Identifiers

saxon65.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\cmssite\template\docbook\extensions\saxon65.jar
MD5: 349902770ef341913696f6420be0e382
SHA1: b11dc911ba244e0d21431baf0d08ca56ffc85868

Identifiers

  • cpe: cpe:/a:saxon:saxon:-   Confidence:LOW   

tagsoup-1.2.1.jar

Description: TagSoup is a SAX-compliant parser written in Java that, instead of parsing well-formed or valid XML, parses HTML as it is found in the wild: poor, nasty and brutish, though quite often far from short. TagSoup is designed for people who have to process this stuff using some semblance of a rational application design. By providing a SAX interface, it allows standard XML tools to be applied to even the worst HTML. TagSoup also includes a command-line processor that reads HTML files and can generate either clean HTML or well-formed XML that is a close approximation to XHTML.

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\cmssite\template\docbook\extensions\tagsoup-1.2.1.jar
MD5: ae73a52cdcbec10cd61d9ef22fab5936
SHA1: 5584627487e984c03456266d3f8802eb85a9ce97

Identifiers

webhelpindexer.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\cmssite\template\docbook\extensions\webhelpindexer.jar
MD5: 89fe1e6847bb3563904274b07e5841b1
SHA1: 52f4f1d0a9cf881744a4b9decfd77cfcaef947db

Identifiers

  • None

ofbiz-ebay.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebay\build\lib\ofbiz-ebay.jar
MD5: dfc1e3aff12109faa0ce7793382530b0
SHA1: c31f7711a1fabe3bc182cb7254c2a7b080353270

Identifiers

  • None

ofbiz-ebaystore.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebaystore\build\lib\ofbiz-ebaystore.jar
MD5: 1247fb4604b861dfb5d0623cd2dad019
SHA1: 4f097235446070149bd19f6b724db3a62f1d3a98

Identifiers

  • None

attributes.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebaystore\lib\attributes.jar
MD5: 24b2f52703c59c3351bbfa8f9550b487
SHA1: 2e84619ab99944d29e3a50344b080de699667a00

Identifiers

  • None

ebaycalls.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebaystore\lib\ebaycalls.jar
MD5: 93de17ad5e92b3f680c78b39c50a4ef2
SHA1: 0d7ab705251e1b24840251582c025a708f6da3b8

Identifiers

  • None

ebaysdkcore.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebaystore\lib\ebaysdkcore.jar
MD5: e28ea2cc1404c7e0ad528ce6957dd3de
SHA1: a777bd059b968c80589bedbed75cd9a56882d849

Identifiers

  • None

helper.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ebaystore\lib\helper.jar
MD5: 08c154a5118da81e284be182ce42ed0c
SHA1: 03314c1b97a14640093cd8973093adeb2b8beaca

Identifiers

  • None

ofbiz-ecommerce.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ecommerce\build\lib\ofbiz-ecommerce.jar
MD5: 7413dff23adf96661ab65cbec5697eb5
SHA1: 683736d253ff7b78118b3d80d1f0f21829f923c6

Identifiers

  • None

ofbiz-example.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\example\build\lib\ofbiz-example.jar
MD5: 229f4db17ac95d3fa796c1825818f407
SHA1: b0864398bbf5081d59367438d52a20c09a26669d

Identifiers

  • None

ofbiz-googlebase.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\googlebase\build\lib\ofbiz-googlebase.jar
MD5: eaad80e2577c92067362986b0bcef9a5
SHA1: d9e18d7f3a6d0f3101f8139f0c90289a82698f74

Identifiers

  • None

ofbiz-googlecheckout.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\googlecheckout\build\lib\ofbiz-googlecheckout.jar
MD5: 6129fe32a18e1c2b7dac4f56cf744d55
SHA1: 8fb46b91b94e196c6a93711d07cc2df5f3e09655

Identifiers

  • None

checkout-sdk-0.8.8.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\googlecheckout\lib\checkout-sdk-0.8.8.jar
MD5: 67050cd1176f674a6630e7fd12f63e26
SHA1: eeb75a7d517da08acf62fa249b45112a9259cb44

Identifiers

  • None

ofbiz-hhfacility.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\hhfacility\build\lib\ofbiz-hhfacility.jar
MD5: c9b42047c9db458098deb19fd7052925
SHA1: e4922b43f95c15032cfd95506e894fa7aa2b7770

Identifiers

  • None

ofbiz-ldap.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\ldap\build\lib\ofbiz-ldap.jar
MD5: 2178fa96f6b25890a6983f47603095ee
SHA1: d9fe58fcfd903ea67ed329af296586d2df6d21ea

Identifiers

  • None

cas-server-core-3.3.jar

Description: CAS core

File Path: C:\projectsASF\ofbiz\specialpurpose\ldap\lib\cas-server-core-3.3.jar
MD5: e3a8576e71cc9f2795883d04ecd3ccb3
SHA1: 213300c6618937c9aad0bb8d18d16ae3c916a93e

Identifiers

lucene-test.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\lucene\build\lib\lucene-test.jar
MD5: 5a9ec5aa05d9f7f90f3c55c7da2622d2
SHA1: b66d0f9c8bc53a19382767897ccf0c5efc671f0e

Identifiers

  • None

lucene.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\lucene\build\lib\lucene.jar
MD5: 2d6c4e9590595f7b4d7adac684eeafce
SHA1: e0bb49ef60b92a5fdd07600d2104fd70e868a98d

Identifiers

  • None

lucene-analyzers-common-5.3.1.jar

Description: Additional Analyzers

File Path: C:\projectsASF\ofbiz\specialpurpose\lucene\lib\lucene-analyzers-common-5.3.1.jar
MD5: 8c29e03ee7acf85716501e91a15321be
SHA1: bd804dbc1b8f7941018926e940d20d1016b36c4c

Identifiers

lucene-core-5.3.1.jar

Description: Apache Lucene Java Core

File Path: C:\projectsASF\ofbiz\specialpurpose\lucene\lib\lucene-core-5.3.1.jar
MD5: c485f41387fceb3ee1df4c527aff9829
SHA1: 36860653d7e09790ada96aeb1970b4ca396ac5d7

Identifiers

lucene-queryparser-5.3.1.jar

Description: Lucene QueryParsers module

File Path: C:\projectsASF\ofbiz\specialpurpose\lucene\lib\lucene-queryparser-5.3.1.jar
MD5: e732b911e970ff66b9821df604a4f005
SHA1: bef0e2ac5b196dbab9d0b7c8cc8196b7ef5dd056

Identifiers

ofbiz-oagis.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\oagis\build\lib\ofbiz-oagis.jar
MD5: 7b61088aabe473c762b80d1a7338853b
SHA1: a44f7ff686ee8d691d7e620f67ba26b4c19b2806

Identifiers

  • None

ofbiz-passport.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\passport\build\lib\ofbiz-passport.jar
MD5: 35547544b509d1a2474ce062df95553a
SHA1: 09a088aa59cc1b1703c5d346eaf57b579227f2e6

Identifiers

  • None

ofbiz-pos.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\build\lib\ofbiz-pos.jar
MD5: b2db7d62f3789e8c85192a631400d128
SHA1: a8f608708cc095f74e63ece7c58cfefe76ed882d

Identifiers

  • None

jcl.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\lib\jcl.jar
MD5: 1f270823e42357c5002cb38c759a2a5a
SHA1: ea0ec582a3b7d585dc2ec3efad25480fba26ba8a

Identifiers

  • None

jpos18-controls.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\lib\jpos18-controls.jar
MD5: 39acaf522f5872e175b7f1b47d461371
SHA1: 47a4cf80361f065d16ac6d88373aba21eb1af47d

Identifiers

  • None

looks-2.0.2.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\lib\looks-2.0.2.jar
MD5: 4d375614b765163cb447edcdfa6ade7e
SHA1: 4970f4be588597ab900bc4c557395e342932604b

Identifiers

  • None

XuiCoreSwing-v3.2rc2b.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\lib\XuiCoreSwing-v3.2rc2b.jar
MD5: ee57fc7028c280efb250f20980075220
SHA1: 88f202752cd7e675e7c04c06b677a97648b1ca5e

Identifiers

  • None

XuiOptional-v3.2rc2b.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\pos\lib\XuiOptional-v3.2rc2b.jar
MD5: 16dacf0d6d5d947c431789635234b780
SHA1: 3752a979846a7d19e1c894fe5d550b0309dbd139

Identifiers

  • None

ofbiz-projectmgr.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\projectmgr\build\lib\ofbiz-projectmgr.jar
MD5: a4df05a3113f950b00d0f270482b1b07
SHA1: 0bc3a736484fed91207e4e7f099e05752f9f5e65

Identifiers

  • None

ofbiz-scrum.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\scrum\build\lib\ofbiz-scrum.jar
MD5: 55c73fea4a405e8b978c87e0c5a3d84c
SHA1: 6adb618bee28ac7ba86df58c829b7ed5ed296430

Identifiers

  • None

ofbiz-solr.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\build\lib\ofbiz-solr.jar
MD5: 67c70a2a06f54368f9fa7bc74b578a5d
SHA1: 71d4b32e439388703e4eddb71ebfae58e234caf7

Identifiers

  • None

solr-core-5.3.1.jar

Description: Apache Solr Core

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\compile\solr-core-5.3.1.jar
MD5: cff1dd172bebe55b046016c6ca2a59cd
SHA1: dacde184d486749c79f1cfcce456bae721ae6437

Identifiers

httpmime-4.4.1.jar

Description:  Apache HttpComponents HttpClient - MIME coded entities

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\httpmime-4.4.1.jar
MD5: 678b75d71032e823480a41123b6b3ce2
SHA1: 2f8757f5ac5e38f46c794e5229d1f3c522e9b1df

Identifiers

joda-time-2.2.jar

Description: Date and time library to replace JDK date handling

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\joda-time-2.2.jar
MD5: 226f5207543c490f10f234e82108b998
SHA1: a5f29a7acaddea3f4af307e8cf2d0cc82645fd7d

Identifiers

lucene-codecs-5.3.1.jar

Description:  Codecs and postings formats for Apache Lucene.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-codecs-5.3.1.jar
MD5: e7a51a4509ad2837c401fc83fd5645f7
SHA1: 5ce45a220258f1d92d8fcdba4dbbb43e4f035835

Identifiers

lucene-highlighter-5.3.1.jar

Description:  This is the highlighter for apache lucene java

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-highlighter-5.3.1.jar
MD5: 397a6f8aed3b8af8fbc4ea361764aaa6
SHA1: dd655be794feb9c42981b5c01b9f7f38e8b7f39e

Identifiers

lucene-join-5.3.1.jar

Description: Lucene Join Module

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-join-5.3.1.jar
MD5: 884410c82522134d1b218b53032c8e60
SHA1: 88f828205c9dfb328c3e0f600010665e1934e495

Identifiers

lucene-misc-5.3.1.jar

Description: Miscellaneous Lucene extensions

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-misc-5.3.1.jar
MD5: 81c0ce56e57f27bf53283dddb8ae7301
SHA1: 7891bbc18b372135c2a52b471075b0bdf5f110ec

Identifiers

lucene-queries-5.3.1.jar

Description: Lucene Queries Module

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-queries-5.3.1.jar
MD5: 232b7d1ba5073a6fbb659565abdc8e38
SHA1: 305665b15a8b9b7840c1b804d1cb694b4177e035

Identifiers

lucene-spatial-5.3.1.jar

Description:  Spatial Strategies for Apache Lucene

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-spatial-5.3.1.jar
MD5: 2a08625eca709f859e6bbec8860e3107
SHA1: 1b7fc73a7e24f40cb80cdc87d382fc73f6b8c2be

Identifiers

lucene-suggest-5.3.1.jar

Description: Lucene Suggest Module

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\lucene-suggest-5.3.1.jar
MD5: 04585b35e85220c6a420a4831b9b2233
SHA1: 3da861f35aeefa786574aecec3272ea5924e45b8

Identifiers

noggit-0.6.jar

Description: Noggit is the world's fastest streaming JSON parser for Java.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\noggit-0.6.jar
MD5: 9440bd2e9201f69b7967832de17e068c
SHA1: fa94a59c44b39ee710f3c9451750119e432326c0

Identifiers

org.restlet-2.3.0.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\org.restlet-2.3.0.jar
MD5: 33a94f74de95421b4938dfecb0029ab1
SHA1: 4c5d184e23fa729726668a90dc7338d80c4e7e6f

Identifiers

  • cpe: cpe:/a:restlet:restlet:2.3.0   Confidence:LOW   

spatial4j-0.4.1.jar

Description:  Spatial4j is a general purpose spatial / geospatial ASL licensed open-source Java library. It's core capabilities are 3-fold: to provide common geospatially-aware shapes, to provide distance calculations and other math, and to read shapes in WKT format.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\spatial4j-0.4.1.jar
MD5: 7eafc2e18e82d7a38cb800be2dc9d678
SHA1: 4234d12b1ba4d4b539fb3e29edd948a99539d9eb

Identifiers

zookeeper-3.4.6.jar

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\lib\runtime\zookeeper-3.4.6.jar
MD5: 7d01d317c717268725896cfb81b18152
SHA1: 01b2502e29da1ebaade2357cd1de35a855fa3755

Identifiers

antlr-runtime-3.5.jar

Description: A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\antlr-runtime-3.5.jar
MD5: aa6d7c8b425df59f5f5bc98c58cfd9fc
SHA1: 0baa82bff19059401e90e1b90020beb9c96305d7

Identifiers

asm-4.1.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\asm-4.1.jar
MD5: fd87b0fa932a63edcc1ef652a9a33258
SHA1: ad568238ee36a820bd6c6806807e8a14ea34684d

Identifiers

asm-commons-4.1.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\asm-commons-4.1.jar
MD5: 9a4b40374d11fcb2c5b1d2a4b789e91d
SHA1: f8b86f4ee6e02082f63a658e00eb5506821253c6

Identifiers

commons-cli-1.2.jar

Description:  Commons CLI provides a simple API for presenting, processing and validating a command line interface.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\commons-cli-1.2.jar
MD5: bfdcae1ff93f0c07d733f03bdce28c9e
SHA1: 2bf96b7aa8b611c177d329452af1dc933e14501c

Identifiers

commons-configuration-1.6.jar

Description:  Tools to assist in the reading of configuration/preferences files in various formats

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\commons-configuration-1.6.jar
MD5: b099d9f9b4b99071cc52b259308df69a
SHA1: 32cadde23955d7681b0d94a2715846d20b425235

Identifiers

commons-exec-1.3.jar

Description: Apache Commons Exec is a library to reliably execute external processes from within the JVM.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\commons-exec-1.3.jar
MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8
SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b

Identifiers

concurrentlinkedhashmap-lru-1.2.jar

Description:  A high performance version of java.util.LinkedHashMap for use as a software cache.

License:

Apache: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\concurrentlinkedhashmap-lru-1.2.jar
MD5: 8cc08a8837afd8e78b444a99c53ce09b
SHA1: 4316d710b6619ffe210c98deb2b0893587dad454

Identifiers

hadoop-auth-2.6.0.jar

Description: Apache Hadoop Auth - Java HTTP SPNEGO

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\hadoop-auth-2.6.0.jar
MD5: 092f736dfec15aed947aa800f19c62fa
SHA1: b0b8dec23a84ac8a0d00fbd69a87d320724ae34a

Identifiers

CVE-2015-1776  

Severity: Low
CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N)
CWE: CWE-200 Information Exposure

Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.

Vulnerable Software & Versions: (show all)

hppc-0.5.2.jar

Description: High Performance Primitive Collections. Fundamental data structures (maps, sets, lists, stacks, queues) generated for combinations of object and primitive types to conserve JVM memory and speed up execution.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\hppc-0.5.2.jar
MD5: 835da0007c0756055b5934d09a0d9cb0
SHA1: 074bcc9d152a928a4ea9ac59a5b45850bf00cd4e

Identifiers

htrace-core-3.0.4.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\htrace-core-3.0.4.jar
MD5: ddb872231eb1940a8f7d5b2b5d026b86
SHA1: d7461828faf28411f37f8570d896292db277d838

Identifiers

jackson-core-2.5.4.jar

Description: Core Jackson abstractions, basic JSON streaming API implementation

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\jackson-core-2.5.4.jar
MD5: 7a3aa950d37e75199d30426a467ddf83
SHA1: 0a57a2df1a23ca1ee32f129173ba7f5feaa9ac24

Identifiers

jackson-dataformat-smile-2.5.4.jar

Description: Support for reading and writing Smile ("binary JSON") encoded data using Jackson abstractions (streaming API, data binding, tree model)

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\jackson-dataformat-smile-2.5.4.jar
MD5: a3868ca8efddfec575b139f574e21dc2
SHA1: db0c5f1b6e16cb5f5e0505abfcd4b36f3e8bfdc6

Identifiers

lucene-analyzers-kuromoji-5.3.1.jar

Description:  Lucene Kuromoji Japanese Morphological Analyzer

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-analyzers-kuromoji-5.3.1.jar
MD5: 2a661e759f75273347b7e04dd3d666fb
SHA1: 56dc1408e7f98ae569ed17aa02451cb624e88d5f

Identifiers

lucene-analyzers-phonetic-5.3.1.jar

Description:  Provides phonetic encoding via Commons Codec.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-analyzers-phonetic-5.3.1.jar
MD5: 529a4272b3455fb69a9fc540add2cb09
SHA1: 78943ef1718e73973bde9da105885566ad0e07f1

Identifiers

lucene-backward-codecs-5.3.1.jar

Description:  Codecs for older versions of Lucene.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-backward-codecs-5.3.1.jar
MD5: 195d7917cd4078cee52eebecdb167797
SHA1: 380603f537317a78f9d9b7421bc2ac87586cb9a1

Identifiers

lucene-expressions-5.3.1.jar

Description:  Dynamically computed values to sort/facet/search on based on a pluggable grammar.

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-expressions-5.3.1.jar
MD5: 864a09977dea28681d198d63b7da5ea5
SHA1: 2e45ba271969611bc3071b19cd164d6986f85825

Identifiers

lucene-grouping-5.3.1.jar

Description: Lucene Grouping Module

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-grouping-5.3.1.jar
MD5: 8bc44800a541192958bc7ab5cf16b132
SHA1: 92a68afa9b7be5cbc35ca99f23003dfebc940aa7

Identifiers

lucene-memory-5.3.1.jar

Description:  High-performance single-document index to compare against Query

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-memory-5.3.1.jar
MD5: 671893c9b394b6ee50b920c83c596bd9
SHA1: 07d120aa207de0c422132b951585691e5afa645e

Identifiers

lucene-sandbox-5.3.1.jar

Description: Lucene Sandbox

File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\lucene-sandbox-5.3.1.jar
MD5: e8a9ce2b4d9a0a4ce22befb6a1d02a6e
SHA1: 2ab2b12bf7bec88b879423898bd32067e3655fa3

Identifiers

protobuf-java-2.5.0.jar

Description:  Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.

License:

New BSD license: http://www.opensource.org/licenses/bsd-license.php
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\protobuf-java-2.5.0.jar
MD5: a44473b98947e2a54c54e0db1387d137
SHA1: a10732c76bfacdbd633a7eb0f7968b1059a65dfa

Identifiers

stax2-api-3.1.4.jar

Description: tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.

License:

The BSD License: http://www.opensource.org/licenses/bsd-license.php
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\stax2-api-3.1.4.jar
MD5: c08e89de601b0a78f941b2c29db565c3
SHA1: ac19014b1e6a7c08aad07fe114af792676b685b7

Identifiers

t-digest-3.1.jar

Description: Data structure which allows accurate estimation of quantiles and related rank statistics

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\t-digest-3.1.jar
MD5: ba0c00142170b71bd3ae17d2d7e4e38b
SHA1: 451ed219688aed5821a789428fd5e10426d11312

Identifiers

woodstox-core-asl-4.4.1.jar

Description: Woodstox is a high-performance XML processor that implements Stax (JSR-173) and SAX2 APIs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\woodstox-core-asl-4.4.1.jar
MD5: 1f53f91f117288fb2ef2e120f27e5498
SHA1: 84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1

Identifiers

wstx-asl-3.2.7.jar

Description: Woodstox is a high-performance XML processor that implements Stax (JSR-173) API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\specialpurpose\solr\webapp\solr\WEB-INF\lib\wstx-asl-3.2.7.jar
MD5: 5ca667e626a1b2f3e5522cb431370cc6
SHA1: 252c7faae9ce98cb9c9d29f02db88f7373e7f407

Identifiers

ofbiz-webpos.jar

File Path: C:\projectsASF\ofbiz\specialpurpose\webpos\build\lib\ofbiz-webpos.jar
MD5: 0c6db8ec1969464926dbcb55bc02bc12
SHA1: 626d96c7db43605ae639474658417d96a6d00f0e

Identifiers

  • None

contrast-rO0.jar

File Path: C:\projectsASF\ofbiz\tools\demo-backup\contrast-rO0.jar
MD5: 385d1d5ed6f9556a06c897a999f7fb11
SHA1: 8dc7bcd50e18bea809e78cf5af87a7b5157ad26c

Identifiers

  • None

notsoserial-1.0-SNAPSHOT.jar

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\projectsASF\ofbiz\tools\security\notsoserial\notsoserial-1.0-SNAPSHOT.jar
MD5: 61a1074a0c4e37f7477b7066e21c48a6
SHA1: 0db32cf9d21a05f9734e4b4089a52d0e40879c1e

Identifiers

  • maven: org.kantega:notsoserial:1.0-SNAPSHOT   Confidence:HIGH


This report contains data retrieved from the National Vulnerability Database.